A popular WordPress vulnerability has been found carrying a critical vulnerability which allowed hackers to attack websites, steal sensitive data, and even force them offline. The vulnerability, ...

A WordPress plugin has been found to contain "easily exploitable" security issues that can be exploited to completely take over vulnerable websites. The plugin at the heart of the matter, WP Database ...

Researcher Ryan Dewhurst released the WPScan Vulnerability Database, a database housing security vulnerabilities in WordPress core code, plug-ins and themes. It’s available for pen-testers, WordPress ...

A critical WordPress plugin flaw allows threat actors to run arbitrary PHP commands, potentially taking over entire websites.

The developers of the ThemeGrill Demo Importer for WordPress have updated the plugin to remove a critical bug that gives admin privileges to unauthenticated users. In the process of getting logged in ...

A second vulnerability could be used to prevent access to almost all of a site’s existing content, by simply redirecting visitors. A pair of security vulnerabilities in the WordPress search engine ...

More than 60 million people and businesses use WordPress to run their websites or blogs, according to founder Matt Mullenweg. WordPress is a free, open-source blogging platform and content-management ...

You can think of a WordPress plugin as a small application that "plugs into" your WordPress site and adds new features to it or extends existing features to optimize ...

Certain critical and also high severity vulnerabilities within the known Responsive Menu WordPress plugin that was responsible for exposing over 100,000 sites to certain takeover attacks that were ...