This site uses cookies in accordance with our Privacy Policy.
Wordfence Research and News
Critical Privilege Escalation Vulnerabilities Affect 100K Sites Using Ultimate Member Plugin
On October 23, 2020, our Threat Intelligence team responsibly disclosed several vulnerabilities in Ultimate Member, a WordPress plugin installed on over 100,000 sites.
Unpacking the WordPress 5.5.2/5.5.3 Security Release
On Thursday, October 29, the WordPress core team released WordPress version 5.5.2.
High Severity Vulnerability Patched in Child Theme Creator by Orbisius
On September 9, 2020, our Threat Intelligence team discovered a vulnerability in Child Theme Creator by Orbisius, a WordPress plugin installed on over 30,000 sites.
Vulnerability Exposes Over 4 Million Sites Using WPBakery
On July 27th, our Threat Intelligence team discovered a vulnerability in WPBakery, a WordPress plugin installed on over 4.3 million sites.
Common Ways Attackers Are Stealing Credentials
A few weeks ago, we reviewed some of the worst website hacks we’ve ever seen.
Critical Vulnerabilities Patched in XCloner Backup and Restore Plugin
On August 14, our Threat Intelligence team discovered several vulnerabilities present in XCloner Backup and Restore, a WordPress plugin installed on over 30,000 sites.
The Hacker Motive: What Attackers Are Doing with Your Hacked Site
Yesterday, September 15, 2020, the Wordfence Live team covered The Hacker Motive: What Attackers Are Doing with Your Hacked Site.
700,000 WordPress Users Affected by Zero-Day Vulnerability in File Manager Plugin
This morning, on September 1, 2020, the Wordfence Threat Intelligence team was alerted to the presence of a vulnerability being actively exploited in File Manager, a WordPress plugin with over 700,000 active installations.
10 WordPress Security Mistakes You Might Be Making
Yesterday, August 18, 2020, the Wordfence Live team covered 10 WordPress Security Mistakes You Might be Making.
Critical Vulnerabilities Patched in Quiz and Survey Master Plugin
On July 17, 2020, our Threat Intelligence team discovered two vulnerabilities in Quiz and Survey Master (QSM), a WordPress plugin installed on over 30,000 sites.
Breaking WordPress Security Research in your inbox as it happens.
