WordPress news
6 FEEDS · 30 POSTS UPDATED 4 NOV 13:45
01 — Needs attention 3 of 30
ACTIVE EXPLOIT WORDFENCE 6 days ago
WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release
BACKDOOR WORDPRESS NEWS AND LATEST UPDATES
UpdraftPlus WordPress Plugin Security Breach Enables Backdoor Attacks via @sejournal, @martinibuster
14 days ago
BACKDOOR PATCHSTACK BLOG
Stolen UpdraftCentral Keys Are Backdooring WordPress Sites
16 days ago
02 — Advisories 4 POSTS

Routine vulnerability roundups and patch reports. Worth a scan.

HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
WORDFENCE 2 days ago
Vulnerability & Patch Roundup — October 2026
SUCURI BLOG 4 days ago
Wordfence Bug Bounty Program Monthly Report – July 2026
WORDFENCE 6 days ago
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)
WORDFENCE 6 days ago
03 — Everything else 23 POSTS

Releases, tutorials and community writing, grouped by when they landed.

THIS WEEK 8 POSTS
1 day ago
WordPress 7.2 Beta 4
WORDPRESS NEWS
1 day ago
Wordfence Price Increase Coming December 3, 2026
WORDFENCE
5 days ago
WordPress doesn’t ship Brotli. It’s still exposed to CVE-2026-111497
PATCHSTACK BLOG
7 days ago
WordPress Announces Another Security Release: Version 7.1.4 via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
7 days ago
WordPress 7.1.4 Security Release
PATCHSTACK BLOG
7 days ago
WordPress 7.1.4
WORDPRESS NEWS
8 days ago
What Is Phishing? Recognizing and Preventing Attacks
SUCURI BLOG
8 days ago
WordPress 7.2 Beta 2 
WORDPRESS NEWS
EARLIER THIS MONTH 11 POSTS
14 days ago
Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)
SUCURI BLOG
14 days ago
Critical PHP Security Release
WORDPRESS NEWS
14 days ago
Major security alert: PHP vulnerable to critical RCE, attacks ongoing
PATCHSTACK BLOG
15 days ago
HTTP 401 Unauthorized: What It Means and How to Fix It
SUCURI BLOG
15 days ago
WordPress 7.2 Beta 1 is Ready for Download and Testing
WORDPRESS NEWS
21 days ago
What’s new for developers? (October 2026)
WORDPRESS DEVELOPER BLOG
21 days ago
500 Internal Server Error: What It Means and How to Fix It
SUCURI BLOG
23 days ago
All In One SEO WordPress Plugin Vulnerable To Two Exploits via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
26 days ago
Jetpack 16.3 WordPress Plugin Update Is A Winner via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
27 days ago
Critical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge Plugin
PATCHSTACK BLOG
28 days ago
WordPress Releases Canonical MCP Adapter Plugin via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
OLDER 4 POSTS
55 days ago
What’s new for developers? (September 2026)
WORDPRESS DEVELOPER BLOG
78 days ago
Hands-on with the WordPress 7.1 Icon Registration API
WORDPRESS DEVELOPER BLOG
86 days ago
What’s new for developers? (August 2026)
WORDPRESS DEVELOPER BLOG
93 days ago
Rethinking do_action(): Events as objects, hooks as class names
WORDPRESS DEVELOPER BLOG
END OF FEED