WordPress is updating soon to version 5.6 which aims to be compatible with PHP 8. However, WordPress cautioned that it should be considered “beta-compatible” and explained why upgrading to PHP 8 ...

W3 Total Cache (W3TC), a WordPress plugin with more than a million users, carries a critical-severity vulnerability that allows threat actors to fully take over compromised websites, experts have ...

Researchers found three critical remote code execution (RCE) vulnerabilities in the 'PHP Everywhere' plugin for WordPress, used by over 30,000 websites worldwide. PHP Everywhere is a plugin that ...

Old instances of the popular WordPress Duplicator Plugin are leaving sites open to remote code execution attacks. Researchers are warning that attackers are abusing a vulnerability in WordPress site ...

In the last post I showed you how to get started building a WordPress plugin from scratch. Now I’d like to show you how to add administrative features to the back end of WordPress so that your plugin ...

A third party WordPress Gutenberg Template Library plugin with over a million users was discovered to have two vulnerabilities. Successful exploitation of these vulnerabilities could create an ...

WordPress plugins running on as many as 36,000 websites have been backdoored in a supply-chain attack with unknown origins, security researchers said on Monday. So far, five plugins are known to be ...

Watch out for SoakSoak, a new malware threat that has compromised more than 100,000 WordPress websites and led to more than 11,000 domains’ being blacklisted by Google. WordPress is a hugely popular ...

AUSTIN, Texas--(BUSINESS WIRE)--WP Engine, the WordPress Digital Experience Platform (DXP), today announced the launch of the Cloudflare Stream Video Plugin for WordPress. The plugin was built by WP ...

A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation ...