A high-severity Unrestricted File Upload vulnerability, tracked as CVE-2020–35489, was discovered in a popular WordPress plugin called Contact Form 7, currently installed on 5 Million+ websites...

Ransomware can lock you out of your site and charge you to get back in. Learn three techniques to prevent this form of hacking in WordPress!

70 million sites are running vulnerable plugins and themes. Find out how to protect your website against the top 4 WordPress vulnerabilities!

WordPress versions 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 are affected to XML eXternal Entity vulnerability where an authenticated user with the ability to upload files in the Media Library can upload a...

On 13th May 2021, WordPress released WordPress 5.7.2, which was a security release fixing one vulnerability that affected versions 3.7 to 5.7. This vulnerability is a PHP Object Injection vulnerabi...

In this article, we take a look at WPSec and share how it can help you secure your WordPress website from thousands of vulnerabilities.

A critical security vulnerability was recently discovered in the Essential Addons for Elementor, a plugin that has over a million active installations on the WordPress plugin repository.  The plugin...

This link will take you to a page that’s not on LinkedIn

In this guide you will learn how to install and protect WordPress with the Open Source Web Application Firewall (WAF) ModSecurity. We will also install the latest protection rules from the OWASP Core...

TL;DR: We have found no evidence that the new Trojan Source method has been used to sneak in backdoors in any of the WordPress plugins listed on WordPress.org (CVE-2021-42694 and CVE-2021-42574) A...

Author: Luke (@hakluke) Stephens It always blows me away to think that WordPress runs 43% of all websites, including those without a content management system (CMS) 🤯. A single open source project...

Keeping your WordPress site safe is crucial. Let's explore five features currently lacking from the core platform, and why they matter!

A vast majority of the web is running outdated versions of PHP. Let's talk about why that is a problem and how to fix it!

Nmap is one our favorite tool when it comes to security testing (except for WPSec.com). Nmap was created in 1997 by Gordon Lyon aka Fyodor. The current version 7.60 contains about 580 different...

On 15th July 2021, news was going around regarding an unauthenticated SQL Injection in WooCommerce. WooCommerce released a blog post about the vulnerabilities here: https://woocommerce.com/posts/cr...

The WordPress team is excited to announce the release of the 6.4 Beta 1 version. Kindly avoid using it on main or critical sites. For best results, test this Beta on a designated test platforms....

A new vulnerability has been discovered in the popular plugin UpdraftPlus. The plugin has more than 3 millon active installations currently and the vulnerability has a CVE identifier reserved as...

WordPress is a widely used content management system that powers millions of websites. Security is crucial for the owners running WordPress sites as a breached site can seriously compromise its users...

The Forminator plugin for WordPress, utilized by over 500,000 sites, has a vulnerability that could let attackers upload files to the server without restrictions. Developed by WPMU DEV, Forminator is...

WordPress security plugins are vital tools for keeping your website safe. Let's explore four of the best tools you can find!

WordPress security plugins are vital tools for keeping your website safe. Let's explore four of the best tools you can find!

WordPress is the world's most widely used CMS (Content Management System). It has a long history of software bugs in its core and plugins, some of which are vulnerabilities (such as SQL injection and...

Web servers are unique in network environments because they are exposed to the internet and serve web traffic to potentially unknown users. Furthermore, web servers often run dynamic applications...

Automattic's WP.cloud and Pressable.com platforms have recently noticed a disturbing pattern of compromised sites. They found that illegitimate new administrator accounts were continuously appearing...

We apologise for the recent service disruption caused by our server upgrade. The upgrade did not proceed as planned, resulting in downtime that may have impacted your vulnerability reports. Our tea...

If you are ready to be part of our success story, we are happy to have you on board. Discover WPSec's affiliate program and start earning!

May the festival of lights brighten up everyone’s lives. Happy Diwali to the entire WordPress community. :-) Important announcement! Dear WordPress Community Members, We are ecstatic to condu…

WordPress 5.7 enables users to migrate to HTTPS with one click. In this post, we'll cover everything you need to know about this feature!

Author: Duncan Jepson 22% of compromised WordPress websites occurred via vulnerabilities in their installed plugins. This was a staggering statistic to me when I first heard it. Because of this, I...

As many of you know, WordPress is written in PHP. Finding backdoors in PHP and WordPress code can be quite tricky and sometimes almost impossible: Since backdoors could be hidden anywhere in the code...

Harden your website's authentication; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.