Suggestions:

An Interview with a Wordfence Senior Security Analyst

June 29, 2016

Colette Chamberland is one of our two Senior Security Analysts who mentor and guide the rest of our team of analysts. She works closely with our site cleaning team to maintain our forensic investigation processes that ensure we deliver excellent and timely service to our customers while ensuring their data and credentials stay secure and their site …
Read More

Vulnerability in Yoast SEO 3.2.4 for WordPress. Severity 5.3 (Medium)

May 6, 2016

Update on May 11th: As per Joost’s (Yoast founder) request (see comments below), we have gone ahead and modified the title of this post to reflect the CVSS score of the vulnerability. We announced yesterday that we are standardizing on CVSS as our vulnerability severity metric which removes any subjectivity and creates a standardized way of …
Read More

Vulnerability in User Role Editor – Users Can Become Admins

April 4, 2016

There is a major vulnerability in a popular plugin with over 300,000 active installs: User Role Editor 4.24 and older. The vulnerability allows any registered user to gain administrator access. For sites that have open registration, this is a serious security hole. If you are running User Role Editor, upgrade to the newest version which is 4.25 …
Read More