Security AdvisoriesOctober 21, 2026Major security alert: PHP vulnerable to critical RCE, attacks ongoing
Security AdvisoriesOctober 8, 2026Critical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge Plugin
Security AdvisoriesOctober 6, 2026Four ways back in: the WordPress XSS campaign that hides its own admin account
Security AdvisoriesSeptember 25, 2026Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites
Security AdvisoriesSeptember 22, 2026CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch
Security AdvisoriesAugust 21, 2026One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin