WordPress

46 Articles

WordPress 7.1.4 Fixes 22 Flaws Including Update-Process RCE

WordPress 7.1.4 fixes 22 vulnerabilities, including an unauthenticated update-process RCE and stored XSS bugs in the Interactivity API.

WordPress —— Oct 6, 2026 3 min read

WordPress 7.1.3 patches seven core vulnerabilities, including stored XSS on the Comments screen and a second-order…

WordPress —— Oct 5, 2026 5 min read

UK security firm Fortbridge on Monday published a working end-to-end exploit that turns an authenticated WordPress…

WordPress —— Sep 23, 2026 4 min read

WordPress has released version 7.1.2 to fix a critical vulnerability in its core software. The flaw…

Security —— Sep 22, 2026 2 min read

A single anonymous comment is enough to plant a script on a WordPress site and, if…

WordPress —— Aug 20, 2026 3 min read

A critical flaw in Elementor Pro lets an unauthenticated visitor upload a PHP file through an…

Security —— Aug 6, 2026 2 min read

Security researchers have shown that the critical wp2shell WordPress flaw doesn’t have to stop at a…

Security —— Jul 20, 2026 14 min read

Last updated: 23 July 2026 · Now includes in-the-wild exploitation data and the WAF-bypass warning. Written…

Security —— Jul 18, 2026 5 min read

WordPress does not force-push updates onto sites that have opted out of them. Doing so overrides…

Security —— Dec 24, 2025 2 min read

Security researchers have uncovered a security bug with three successive patches for same vulnerability in W3…