WordPress.com has launched an official Claude connector, enabling paid users to analyze real site data through AI with built-in security safeguards.

In an effort to tackle one of the internet's most damaging issues, the nonprofit Internet Archive has teamed up with Automattic, the company behind WordPress, to introduce ...

A popular WordPress quiz plugin can be abused to mount SQL injection attacks ...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...

Older versions of Post SMTP allowed hackers to read all emails They could also reset the admin password and read the notification email, gaining access to the account More than 160,000 WordPress sites ...

The RocketGenius website served a malicious variant of the Gravity Forms WordPress add-on for a few hours The variant harvested extensive information and allowed for RCE The malware affected only ...

The WordPress Performance Team has released an experimental plugin that increases the perceived loading speed of web pages without the performance issues and accessibility tradeoffs associated with ...

A new malware campaign targeting WordPress sites employs a malicious plugin disguised as a security tool to trick users into installing and trusting it. According to Wordfence researchers, the malware ...

Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code on every page while evading detection. The technique was first observed by security ...

Your WordPress site might be packed with great content and stunning visuals, but without proper search engine optimization (SEO), it could be hard to find. SEO ensures your site gets noticed, ...

Thousands of sites running WordPress remain unpatched against a critical security flaw in a widely used plugin that was being actively exploited in attacks that allow for unauthenticated execution of ...

There are two vulnerabilities in the Wordpress plug-in Anti-Spam by Cleantalk that allow unauthenticated attackers to compromise instances. The plug-in can respond to remote calls and perform actions ...