WordPress news
6 FEEDS · 30 POSTS UPDATED 4 SEP 16:00
01 — Needs attention 3 of 30
ACTIVE EXPLOIT WORDFENCE 1 day ago
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
ACTIVE EXPLOIT WORDFENCE
Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin
2 days ago
CORE FIX WORDFENCE
5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin
3 days ago
02 — Advisories 4 POSTS

Routine vulnerability roundups and patch reports. Worth a scan.

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
WORDFENCE 1 day ago
Wordfence Argus Finds Unauthenticated Arbitrary File Upload Vulnerability in Gravity Forms
WORDFENCE 3 days ago
Vulnerability & Patch Roundup — August 2026
SUCURI BLOG 3 days ago
FlyWP Adds Proactive Vulnerability Protection with Patchstack
PATCHSTACK BLOG 18 days ago
03 — Everything else 23 POSTS

Releases, tutorials and community writing, grouped by when they landed.

THIS WEEK 6 POSTS
3 days ago
WordPress Announces A Proactive Security Initiative via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
4 days ago
Rank Math SEO Plugin Pauses Controversial Feature. Says It Will Return via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
5 days ago
Rank Math WordPress Plugin Accused Of Secretly Taking Admin Access via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
7 days ago
How To Add Google’s Preferred Sources Button To Your Website via @sejournal, @vahandev
WORDPRESS NEWS AND LATEST UPDATES
7 days ago
Unauthenticated PHP Object Injection to Remote Code Execution on GiveWP
PATCHSTACK BLOG
8 days ago
WordPress Signs the Open Weights and American AI Leadership Letter
WORDPRESS NEWS
EARLIER THIS MONTH 14 POSTS
11 days ago
Third-Party Script Security: How Tags, Pixels, and Embeds Can Put Websites at Risk
SUCURI BLOG
11 days ago
Case study: ManageWP Blocks 11.9M+ Threats in 6 Months with Patchstack
PATCHSTACK BLOG
14 days ago
One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin
PATCHSTACK BLOG
15 days ago
AI Creates Opportunity While Artists Ship at WordCamp US 2026
WORDPRESS NEWS
16 days ago
WordPress 7.1 “Mary Lou”
WORDPRESS NEWS
16 days ago
What Is a Website Attack Surface? A Beginner’s Guide to Reducing Risk
SUCURI BLOG
16 days ago
Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
PATCHSTACK BLOG
17 days ago
Hands-on with the WordPress 7.1 Icon Registration API
WORDPRESS DEVELOPER BLOG
20 days ago
The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.
SUCURI BLOG
22 days ago
Introducing the WordPress Browser Extension
WORDPRESS NEWS
23 days ago
WordPress 7.0.4 Release
WORDPRESS NEWS
23 days ago
Automattic Fires Back At WP Engine’s Motion For Sanctions via @sejournal, @martinibuster
WORDPRESS NEWS AND LATEST UPDATES
24 days ago
How to Create a Secure WordPress Staging Site: Beginner’s Guide
SUCURI BLOG
25 days ago
What’s new for developers? (August 2026)
WORDPRESS DEVELOPER BLOG
OLDER 3 POSTS
32 days ago
Rethinking do_action(): Events as objects, hooks as class names
WORDPRESS DEVELOPER BLOG
36 days ago
Build your first AI-Powered WordPress plugin
WORDPRESS DEVELOPER BLOG
53 days ago
On-brand maintenance mode for WordPress Block Themes
WORDPRESS DEVELOPER BLOG
END OF FEED