vulnerability

Those who use the All-in-One WP Migration plugin are encouraged to update to version 7.0 as soon as possible as … Continue reading All-in-One WP Migration 7.0 Patches XSS Vulnerability →

Slavco Mihajloski, security researcher at Sucuri, has discovered a critical SQL injection vulnerability in NextGEN Gallery, a popular WordPress plugin that’s active … Continue reading NextGEN Gallery Patches Critical SQL Injection Vulnerability →

The BuddyPress development team has released BuddyPress 2.7.4 to address a security vulnerability that affects all versions back to 2.0. … Continue reading BuddyPress 2.7.4 Patches Security Vulnerability That Could Allow Arbitrary File Deletion →

In this episode of WordPress Weekly, Marcus Couch and I are joined by Adam Warner, SiteLock’s WordPress evangelist. Warner describes … Continue reading WPWeekly Episode 238 – Interview with Adam Warner SiteLock’s WordPress Evangelist →

Ninja Forms, a popular plugin active on more than 500K websites, released an update 48 hours ago that addresses a … Continue reading Ninja Forms Update Patches Critical Security Vulnerability →

On this episode of WordPress Weekly, Marcus Couch and I were joined by Drew Jaynes, web engineer for 10up, and … Continue reading WPWeekly Episode 189 – Drew Jaynes on What it’s Like to Lead a WordPress Development Cycle →

WordPress 4.1.2 is available and is a critical security update for all previous versions of WordPress. The release has eight … Continue reading WordPress 4.1.2 is a Critical Security Release, Immediate Update Recommended →

For the past week, security firm Sucuri has worked with the WordPress core security team to address a cross site … Continue reading XSS Vulnerability Affects More Than a Dozen Popular WordPress Plugins →

First reported by Sucuri, the WPTouch plugin has a dangerous security vulnerability and users are encouraged to update immediately. WPTouch … Continue reading Critical Security Update For WPTouch, Users Should Update Immediately →

The developers of Pods, a popular WordPress plugin used to create and extend custom post types, content types, taxonomies, users, … Continue reading Pods Framework For WordPress Releases Update To Patch Security Vulnerability →

Duo Security is a business that provides two-factor authentication services across multiple platforms. Late last week, the company announced on … Continue reading Duo Security Plugin Vulnerability Affecting A Subset Of WordPress Multisite Networks →

Osirt, a malware security company is reporting that the WordPress theme OptimizePress contains a significant security vulnerability. According to the … Continue reading WordPress Theme OptimizePress Contains Security Vulnerability →