11,334 new WordPress vulnerabilities were discovered in 2025. That’s 31 new attack vectors every single day; a 42% jump on the year before, and almost all of them in third-party plugins and themes, not in WordPress core. Which means the security of your site depends almost entirely on which plugins
July’s news that thousands of websites were put at risk following a vulnerability in an essential WordPress plugin has left many users worried about their site security. The vulnerability was discovered by staff at Wordfence, and enabled hackers to upload files to targeted sites. No matter what your site’s purpose is, knowing how
FooGallery and FooBox have both been updated to address a potential security risk. Freemius recently notified us, as one of their customers, of a potential SDK security vulnerability. They went to work on the issue immediately and asked developers to do the same. The issue was quickly resolved on their
18 Mar 2014 Update : the plugin has been accepted and is now available on the WordPress.org plugin repo! Recently, Sucuri posted about 160,000 WordPress sites being used in a DDoS attack. This got me worried about my personal blog, as someone had emailed me last year, claiming that my
