KeenWPWordPress intelligence

Topic intelligence

WordPress Security

KeenWP tracks consequential WordPress security developments for developers, agencies, hosts, and teams responsible for production websites. Follow WordPress Core, plugin and theme vulnerabilities, actively exploited flaws, security releases, supply-chain incidents, hardening guidance, and incident response.

We prioritize updates with practical impact and link directly to the original research, vendor advisory, or reporting so you can verify the details and act quickly.

Learn more about how KeenWP curates the feed and the sources we monitor.

Showing 20 of 85 posts

5
Wordfence BlogSecurity
100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS (opens original article in a new tab)
Read original : 100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS (opens in a new tab)Summarize with ChatGPT: 100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS (opens ChatGPT in a new tab)
5
Wordfence BlogSecurity
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin (opens original article in a new tab)
Read original : Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin (opens in a new tab)Summarize with ChatGPT: Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin (opens ChatGPT in a new tab)