WordPress News & Coverage
Wordfence Intelligence reports 75 new WordPress vulnerabilities disclosed in plugins and themes during May 4–10, 2026, with critical flaws prompting immediate firewall updates.
The Avada Builder WordPress plugin with 1 million active sites has critical Arbitrary File Read and SQL Injection vulnerabilities. Immediate patching is essential.
The latest Wordfence Intelligence report reveals 87 WordPress vulnerabilities disclosed last week, with critical patches and new firewall rules deployed to protect sites.
A critical Arbitrary File Upload vulnerability in Breeze Cache plugin is actively exploited, risking remote code execution on 400,000 WordPress sites. Immediate update to version 2.4.5 is vital.
Wordfence Intelligence reports 157 new WordPress vulnerabilities last week, with 42 unpatched including 6 critical. New firewall rules deployed to protect premium users in real time.
Wordfence reports 139 new WordPress vulnerabilities last week across plugins and themes, with 109 patched and 30 unpatched. Cross-site scripting and authorization flaws dominate.
AI-assisted vulnerability research now drives 66% of WordPress submissions, transforming security workflows while raising stakes for defenders.
Wordfence Intelligence reports 106 vulnerabilities in WordPress plugins and themes last week, with high-threat bug bounty rewards available until April 6.
Wordfence Intelligence disclosed 258 vulnerabilities in WordPress plugins and themes last week, with 138 patched and 120 unpatched. Critical bugs highlight ongoing risks.
116 WordPress vulnerabilities were disclosed last week, including 6 critical ones. Wordfence highlights risks and urges operators to act now.
