Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading ...

Hackers can now take over WordPress sites instantly using a simple plugin flaw ...

More than 30 WordPress plugins were shut down after a supply-chain backdoor compromised thousands of sites through the ...

A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.

Cloudflare created an open-source CMS it calls a "spiritual successor to WordPress" — but WordPress is having none of it. Cloudflare has unveiled EmDash, a new open-source content management system ...

WordPress's massive installed base isn't going anywhere, but many developers and AI agents are not opting for the product for new sites. Will they go for Cloudflare instead? Cloudflare on Wednesday ...

WordPress remains the world’s favourite content management system (CMS), powering more than 43% of all websites globally. Its popularity comes from its flexibility, ease of use and complete control ...

Ally WordPress plugin carried SQL injection flaw (CVE-2026-2413) Vulnerability left ~246,600 sites exposed to data theft Fixed in version 4.1.0; WordPress urges immediate updates A popular WordPress ...

Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk Your email has been sent A vulnerability in a widely used WordPress accessibility plugin could allow ...

The Internet Archive and Automattic have teamed up to tackle one of the web’s biggest annoyances: “link rot.” The two companies have released a new WordPress plugin called Link Fixer that ...

Critical bug in ACF: Extended WordPress plugin allows arbitrary role escalation to administrator About 50,000 WordPress sites are vulnerable despite patch in version 0.9.2.2 No exploitation reported ...