Wordfence Research and News

Blog icon

Meet the New Wordfence

From the moment we launched Wordfence on April 21st, 2012, we have grown beyond our wildest expectations.

Understanding Your Site’s IP Address Reputation

As a website owner you may not think about the fact that your website IP address has a reputation or that it matters.

We’re hiring: PHP Developer

Do you want to work in information security? How about being able to work anywhere on the Planet?

Wordfence Launches IPv6 Support, announces Wordfence 6 and Passes 6 Million Downloads

A brief Introduction to IP version 6 (IPv6) If you already have a solid understanding of IPv6, please click here to scroll down and learn how Wordfence now includes comprehensive support for IPv6.

Wordfence Announces Password Auditing

Today we are very excited to announce a new feature in Wordfence: Password Auditing.

WordPress Security: Hacked Images, Themes, Redirects and A Gem In The Sand

Editor’s note: This is a guest blog post by Jim Walker [bio] who runs HackRepair and has been cleaning hacked websites for well over a decade.

WooCommerce SQL injection vulnerability

Yesterday Matt Barry, one of our researchers at Wordfence discovered a SQL injection vulnerability in WooCommerce version 2.3.5 and older during a code audit of the plugin repository.  

Vulnerability in WordPress SEO by Yoast – Upgrade Immediately

A vulnerability has been discovered in WordPress SEO by Yoast. A fix was released yesterday and so was a ton of press coverage – everything from SearchEngineLand to TheHackerNews to Graham Cluley’s website to SERoundTable to ComputerWorld.

Zero Day SQL Injection Vulnerability in WordPress Video Gallery

Update 2 on Feb 24th: A new version of this plugin has been released.

The Forbes Hack and How Your Visitors are Targets Too

I spent a few days last week in Washington DC chatting to new and old friends in aerospace, many well known cybersecurity vendors and folks in the intelligence community.