Last week, there were 655 vulnerabilities disclosed in 406 WordPress Plugins and 100 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 236 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for authenticated attackers with subscriber-level access and above to store… Continue Reading →
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)
Last week, there were 501 vulnerabilities disclosed in 367 WordPress Plugins and 9 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 201 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
“I think we might lose public key cryptography.” ~Matthew Green The above is from Matthew Green, yesterday, who is a cryptographer at Johns Hopkins. OpenAI released over 700 mathematical proofs as a github repository yesterday. They’ve since withdrawn 3 of… Continue Reading →
Every upload field on your WordPress site is a way in for malware. attachmentAV scans files sent through popular form plugins and the Media Library with Sophos, rejecting anything infected before it reaches your site, your inbox or your clients…. Continue Reading →
The Importance of SSL in Today’s Web Environment It’s become commonplace for a majority of internet users to share personal information on the internet. With the disregard for protecting personal data becoming second nature, how do we protect ourselves and… Continue Reading →
