Wordfence Research and News

Blog icon

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 12, 2024 to August 18, 2024)

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Over 5,000,000 Site Owners Affected by Critical Privilege Escalation Vulnerability Patched in LiteSpeed Cache Plugin

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

$4,998 Bounty Awarded and 100,000 WordPress Sites Protected Against Unauthenticated Remote Code Execution Vulnerability Patched in GiveWP WordPress Plugin

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

10,000 WordPress Sites Affected by Arbitrary File Read and Delete Vulnerability in InPost PL and InPost for WooCommerce WordPress Plugins

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 5, 2024 to August 11, 2024)

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Earn Up to $31,200 Per Vulnerability: Introducing the WordPress Bug Bounty Superhero Challenge!

Today, weโ€™re incredibly excited to launch a new challenge for the Wordfence Bug Bounty Program: the WordPress Superhero Challenge!

5,000 WordPress Sites Affected by Unauthenticated Remote Code Execution Vulnerability in JS Help Desk WordPress Plugin

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 29, 2024 to August 4, 2024)

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)

๐Ÿ“ข Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?

Over 8,000 Exploit Attempts Already Blocked For Recently Patched Unauthenticated Arbitrary File Upload Vulnerability in ็ฎ€ๆ•ฐ้‡‡้›†ๅ™จ (Keydatas) WordPress Plugin

On June 18th, 2024, during the 0-day Threat Hunt Promo of our Bug Bounty Program, we received a submission for an Unauthenticated Arbitrary File Upload vulnerability in ็ฎ€ๆ•ฐ้‡‡้›†ๅ™จ (Keydatas), a WordPress plugin with more than 5,000 active installations.