Last week, there were 100 vulnerabilities disclosed in 82 WordPress Plugins and no WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database,… Read More »Wordfence Intelligence Weekly WordPress Vulnerability Report (May 27, 2024 to June 2, 2024)
The Wordfence Threat Intelligence team is releasing their 2023 State of WordPress Security Report as a free White Paper. In this report, they look at… Read More »The Wordfence 2023 State of WordPress Security Report
Article written by WordFence.com 6/2/22: The Cybersecurity CIA Triad: What You Need to Know as a WordPress Site Owner (wordfence.com) One of the core concepts… Read More »The Cybersecurity CIA Triad: What You Need to Know as a WordPress Site Owner
On February 17, 2022, UpdraftPlus, a WordPress plugin with over 3 million installations, updated with a security fix for a vulnerability discovered by security researcher… Read More »Vulnerability in UpdraftPlus Allowed Subscribers to Download Sensitive Backups
On February 7, 2022, Security Researcher Cyku Hong from DEVCORE reported a vulnerability to us that they discovered in WP Statistics, a WordPress plugin installed… Read More »Unauthenticated SQL Injection Vulnerability Patched in WordPress Statistics Plugin
On December 23, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in “WordPress Email Template Designer –… Read More »[WordPress Security] Unauthenticated XSS Vulnerability Patched in HTML Email Template Designer Plugin
Vulnerability in WP DSGVO Tools (GDPR) Plugin Allows Unauthenticated Page Deletion This entry was posted in Research, Vulnerabilities, WordPress Security on November 2, 2021 by… Read More »Vulnerability in WP DSGVO Tools (WordFence)
On September 27, 2021, the Wordfence Threat Intelligence team initiated the disclosure process for a vulnerability we found in WP DSGVO Tools (GDPR), a WordPress… Read More »[WordPress Security] Vulnerability in WP DSGVO Tools (GDPR) Plugin Allows Unauthenticated Page Deletion
Today October 26th, the Wordfence Threat Intelligence Team published details of a vulnerabilities in a Hashthemes plugin which could be used to completely reset a… Read More »Wordfence Threat Announcement – Hashthemes plugin
Today, October 27th, the Wordfence Threat Intelligence Team published details of a vulnerability in the OptinMonster plugin that affects over 1,000,000 WordPress sites. The vulnerability… Read More »Wordfence Threat Announcement – OptinMonster plugin