WordPress

After a short delay, WordPress 5.9 “Josephine” has finally arrived with the long-awaited full-site editing features that give users more control over site design and page templates. This release is named for American-born jazz singer…

A massive supply chain attack compromised 93 WordPress themes and plugins to contain a backdoor, giving threat-actors full access to websites. In total, threat actors compromised 40 themes and 53 plugins belonging to AccessPress, a…

In yet another instance of software supply chain attack, dozens of WordPress themes and plugins hosted on a developer's website were backdoored with malicious code in the first half of September 2021 with the goal of infecting further…

Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicious actor to take over vulnerable sites. "This flaw made it possible for an…

Credit card swipers are being injected into random plugins of e-commerce WordPress sites, hiding from detection while stealing customer payment details. With the Christmas shopping season in full swing, card-stealing threat actors raise…

GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers. According to Dan Rice, VP of Corporate Communications at GoDaddy, the six resellers also…

WordPress, GoDaddy warned users that this exposure can put them at greater risk of phishing attacks In a huge data breach, global web hosting website GoDaddy has revealed that nearly 1.2 million of its WordPress customers’ sensitive…

Jetpack is acquiring WPScan, a WordPress vulnerability database. WPScan is used across the WordPress ecosystem to learn about new vulnerabilities to WordPress core, themes, and plugins. WPScan started as a simple Ruby script in 2011 to…

Vulnerabilities in OptinMonster, an email marketing plugin for WordPress, left more than a million websites open to exploitation, security researchers at Wordfence warn. Left unaddressed, the flaws make it possible for an unauthenticated…

WP Fastest Cache WordPress plugin vulnerabilities can lead to full site takeover and password leaks Popular WordPress plugin WP Fastest Cache plugin was discovered by Jetpack security researchers to have multiple vulnerabilities that could…