Independent WordPress intelligence

Know what’s changing in WordPress. Build with confidence.

A focused news feed and expert resource library for developers, agencies, product teams, hosts, and people responsible for production WordPress.

Current intelligence

What matters across WordPress now

Selected reporting and technical updates, linked directly to the original publisher.

Showing 20 of 54 posts

5
Wordfence BlogSecurity
100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS (opens original article in a new tab)
5
Wordfence BlogSecurity
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin (opens original article in a new tab)
5
Wordfence BlogSecurity
5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin (opens original article in a new tab)