Tracked topic
Mit WordPress ein eigenes Blog oder eine Homepage aufzusetzen, ist leicht. Schlüsselfertige Installationen des CMS bekommt man praktisch bei jedem Hoster. Das ist ideal, um Informationen zu verbreiten. Manche Daten nur bestimmten…
OptinMonster WordPress plugin hacked in CDN supply-chain attack By Bill Toulas June 15, 2026 01:37 PM WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack…
Cloudflare has deployed two WAF rules in response to high-severity vulnerabilities disclosed to us by the WordPress security team. The new rules protect all Cloudflare customers using affected WordPress versions, but…
Avada Builder WordPress plugin flaws allow site credential theft By Bill Toulas May 15, 2026 11:56 AM Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million…
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure. https://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/ submitt…
Connect any self-hosted WordPress site to your AI
Hi everyone, A high-severity security issue was recently fixed in WordPress 7.0.3 (and backported to older versions). The vulnerability, tracked as CVE-2026-64638, is a pre-authentication reflected XSS flaw on the login …
7.0.2 got released on Friday. Exploits are already happening. 4 of my customers websites got hacked. I was busy the last days and weren’t up to date. Good time to notice that 2 backups failed without me noticing it. Fml …
I’m joining a hosting company as the first person responsible for a new website-security function. Most of the hosted websites are WordPress, and there is currently no established security process for this function. The …
…See all HostPapa WordPress hosting plans GoDaddy GoDaddy offers three managed WordPress hosting plans with pre-installed WordPress. Higher-tier managed WordPress plans also include automated WordPress updates. All GoDaddy WordPress plans…
Mehrere IT-Sicherheitsunternehmen sowie das Bundesamt für Sicherheit in der Informationstechnik (BSI) warnen davor, dass sie Angriffe auf die am vergangenen Freitag bekannt gewordene „wp2shell“-Sicherheitslücke in WordPress beobachten. Es handelt sich…
…The SQL injection could fabricate post records returned from the database and place them into WordPress’s temporary in-memory post cache. The model then used WordPress’s embed behavior to turn…
Een beveiligingsbedrijf heeft kwetsbaarheden ontdekt die het mogelijk maken om op afstand code uit te voeren op WordPress-sites. De proof-of-concept voor dit 'wp2shell'-lek staat online. WordPress heeft de…
Hackers are breaking into websites that run vulnerable versions of the popular blogging software WordPress, according to several cybersecurity firms. One estimate puts the number of vulnerable WordPress websites at tens of…
ShapedPlugin update flow hacked to infect WordPress sites By Bill Toulas June 18, 2026 08:55 AM Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected…
