WordPress News & Coverage
A critical SQL injection vulnerability in WP-Automatic plugin has led to over 5.5 million attack attempts, enabling attackers to gain admin access and upload malware.
A persistent WordPress malware campaign exploits the deprecated php-everywhere plugin to embed malicious PHP code in posts, creating long-term infections beyond file cleanup.
Shell finder bots are scanning WordPress sites for backdoor shells, enabling attackers to maintain stealthy access. Recognizing and blocking these scans is vital for site security.
A wave of JavaScript malware is exploiting vulnerable LiteSpeed Cache plugin versions below 5.7.0.1, injecting malicious code and creating unauthorized admin users.
Discover 10 top website security tools tailored for WordPress enterprises to proactively detect vulnerabilities, automate scans, and respond fast to threats.
