Independent WordPress intelligence

WordPress intelligence for people who build and run it.

Consequential news and dependable technical resources, curated for developers, agencies, product teams, and hosts.

Current intelligence

What matters across WordPress now

Selected reporting and technical updates. Filter the stream or open the complete newsroom for category-by-category coverage.

Showing 20 of 104 posts

5
Wordfence BlogSecurity
100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS (opens original article in a new tab)
5
Wordfence BlogSecurity
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin (opens original article in a new tab)