WordPress published new information that describes why WordPress 5.5 negatively affected millions of websites, a staggering amount. WordPress is publishing a maintenance release, version 5.5.1. It is ...

The WordPress team fixed a software flaw introduced in the 5.1 release that could allow potential attackers to perform stored cross-site scripting (XSS) attacks with the help of maliciously crafted ...

A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.

Critical vulnerability affecting a WordPress user registration and membership plugin enables attackers to take full control of a website.

Hackers exploit a critical WordPress plugin flaw that allows creation of administrator accounts without authentication.