Tracked topic
… WordPress describes it as a high-severity SQL injection vulnerability affecting WordPress 6.8 and later. According to the WordPress advisories, the complete RCE chain affects WordPress 6.9.0 through 6.9.4 and WordPress 7.0.0 through 7.0.1. …
… Link: Real-time collaboration will not ship in WordPress 7.0 | https://make.wordpress.org/core/2026/05/08/rtc-removed-from-7-0/ | Make WordPress Core
… Get the whitepaper Related Articles: WordPress Core "wp2shell" RCE flaws get public exploits, patch now Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin Critical Everest Forms Pro flaw exploited to take over WordPress sites WP Maps Pro bug exploited to create admin accounts on W… …
… Cloudflare is calling EmDash the “spiritual successor” of WordPress — something WordPress founder Matt Mullenweg has already refuted in a blog post about the new platform. “Please don’t claim to be our spiritual successor without understanding our spirit,” Mullenweg writes. “I think EmDash was crea… …
WordPress patches two flaws: CVE‑2026‑60137 SQL injection, medium severity and CVE‑2026‑63030 REST API batch‑route confusion, critical severity When chained, the bugs enabled unauthenticated remote code execution, allowing full site takeover Admins should urgently upgrade to WordPress 6.9.5 or newe… …
… Here’s the WordPress TV app description for more details: The WordPress community’s video library, on your TV. WordPress TV brings the full WordPress.tv catalog to the big screen – thousands of free talks, tutorials, and WordCamp session recordings from WordPress meetups and events around the world. …
WordPress malware campaign hides payloads in Steam profiles By Bill Toulas June 1, 2026 01:04 PM Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control C2 data. …
… Das WordPress-Team hat bereits reagiert und neue Versionen publiziert : WordPress 7.0.2, 6.9.5, 6.8.6 sowie 7.1 beta 2 Versionen vor WordPress 6.8 sind nicht betroffen. …
… Link: Radical Speed Month — The Reader Meets the Fediverse | https://activitypub.blog/2026/05/05/radical-speed-month-the-reader-meets-the-fediverse/?ref=werd.io | ActivityPub for WordPress
… Auch viele Plug-ins wie Kontaktformulare nutzen das JSON-API als Schnittstelle zu WordPress. WordPress eignet sich prima, um Informationen zu verbreiten – um manches etwa dem Vereinsvorstand vorzubehalten, muss man zusätzlichen Aufwand treiben. …
