Threat actors are actively exploiting a critical vulnerability in the Post SMTP plugin installed on more than 400,000 ...

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress, installed on over 100,000 sites, has a vulnerability ...

Many websites exposed to account takeover due to a critical vulnerability in the email delivery WordPress plugin Post SMTP.

What makes this now-patched plugin hole especially dangerous is the lack of authentication needed for an attack, which can ...

There’s another ransomware story this week, but this one comes with a special twist. If you’ve followed this column for long, ...

We’ve built websites with WordPress and Wix. Here’s what we’ve learned and how you can choose the right platform for your site.

A new threat in is the wild affecting sites that run WordPress, a popular content management system. Wordfence, a company that focuses on security research in the WordPress ecosystem, is reporting ...

Unpatched GutenKit and Hunk Companion plugins exploited in mass WordPress attacks Attackers use ‘up’ plugin to gain admin access and deploy malware Wordfence blocked 8.7 million attempts in 48 hours; ...

WordPress remains the dominant force in content management systems, powering 43.3% of websites surveyed and holding a 60.7% share among sites using a CMS, according to W3Techs (October 2025). That is ...

Automattic challenged WordPress developer Kevin Geary over his use of the word “Automatic” in the name of his CSS framework.

Three critical-severity vulnerabilities in the GutenKit and Hunk Companion WordPress plugins have been exploited in a new campaign.

A security vulnerability affecting millions of WordPress websites has been uncovered in the widely used Slider Revolution plugin. The flaw, tracked as CVE-2025-9217, could allow users with contributor ...