This site uses cookies in accordance with our Privacy Policy.
Wordfence Research and News
Category: WordPress Security
High Severity Vulnerability Patched in Child Theme Creator by Orbisius
On September 9, 2020, our Threat Intelligence team discovered a vulnerability in Child Theme Creator by Orbisius, a WordPress plugin installed on over 30,000 sites.
Vulnerability Exposes Over 4 Million Sites Using WPBakery
On July 27th, our Threat Intelligence team discovered a vulnerability in WPBakery, a WordPress plugin installed on over 4.3 million sites.
High Severity Vulnerabilities in Post Grid and Team Showcase Plugins
On September 14, 2020, our Threat Intelligence team discovered two high severity vulnerabilities in Post Grid, a WordPress plugin with over 60,000 installations.
Common Ways Attackers Are Stealing Credentials
A few weeks ago, we reviewed some of the worst website hacks we’ve ever seen.
Critical Vulnerabilities Patched in XCloner Backup and Restore Plugin
On August 14, our Threat Intelligence team discovered several vulnerabilities present in XCloner Backup and Restore, a WordPress plugin installed on over 30,000 sites.
High-Severity Vulnerabilities Patched in Discount Rules for WooCommerce
On August 20, 2020, the Wordfence Threat Intelligence team was made aware of several vulnerabilities that had been patched in Discount Rules for WooCommerce, a WordPress plugin installed on over 40,000 sites.
The Hacker Motive: What Attackers Are Doing with Your Hacked Site
Yesterday, September 15, 2020, the Wordfence Live team covered The Hacker Motive: What Attackers Are Doing with Your Hacked Site.
Attackers Fight for Control of Sites Targeted in File Manager Vulnerability
Last week, we covered a vulnerability in the File Manager plugin installed on over 700,000 WordPress sites.
Millions of Sites Targeted in File Manager Vulnerability Attacks
The Wordfence Threat Intelligence team is seeing a dramatic increase in attacks targeting the recent 0-day in the WordPress File Manager plugin.
700,000 WordPress Users Affected by Zero-Day Vulnerability in File Manager Plugin
This morning, on September 1, 2020, the Wordfence Threat Intelligence team was alerted to the presence of a vulnerability being actively exploited in File Manager, a WordPress plugin with over 700,000 active installations.
Breaking WordPress Security Research in your inbox as it happens.
