Security news aggregator

Latest coverage for Wordpress

WordPress is a content management platform whose core, plugins, and themes can contain vulnerabilities that expose websites, accounts, and data.

6 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

WordPress is an open-source content management system (CMS) used to publish and manage websites. A site typically combines WordPress core with independently developed plugins and themes, which extend functionality but create a diverse and changing software supply chain. Its security therefore depends not only on the core software, but also on the quality, maintenance, and configuration of those extensions.

Security-relevant issues include exploitable vulnerabilities in core, plugins, or themes; weak or reused administrator credentials; and exposed or poorly configured administrative and API interfaces. Attackers may use these paths to alter content, install malicious code, or access site data. Administrators should track advisories and affected versions, apply updates through a controlled process, remove unsupported extensions, enforce strong authentication and least privilege, and keep protected, tested backups. Monitoring and log review help identify unauthorized changes and support recovery when compromise is suspected.

Volume over time

Weekly headline count for the current query.

Showing 6 most recent headlines Filtered view

Also, More ClickFix Attacks and Teen Booters Arrested in PolandThis week, Russian hackers targeted Signal and WhatsApp users, permit-fee phishing hit U.S. applicants, ClickFix on WordPress sites, Microsoft patched 80 bugs, a 14K-router botnet, Polish teens held over DDoS tools and Finland warned of Russian, Chinese espionage. North Korean IT workers for hire.

Bank Info Security 13 Mar 2026, 10:30 a.m. America Botnet Breach China DoS Facebook Finland Microsoft North Korea Patch Phishing Routers Russia Wordpress

Also, Spain Arrests Hacker Behind Leaks Targeting Politicians and JournalistsThis week, Chinese sites mimicked brands, Spain arrested data leak hackers, Swiss health nonprofit ransomware attack, ICC probed a cyberattack, UNFI restored systems, a flaw in smart tractors, RomCom RAT. A U.K. man sentenced for locking employer out of network. A WordPress hack installs a Trojan.

Bank Info Security 4 Jul 2025, 9:30 a.m. Breach China Cyberattack Flaw Hacking Healthcare Journalist Leak Ransomware Remote Access Trojan Spain Trojan Wordpress
Bank Info Security 1 year, 7 months ago

WordPress Plug-In Vulnerability Threatens 4 Million Sites

Critical Authentication Flaw Impacts Both Free and Pro UsersA widely deployed five-in-one security plug-in for WordPress websites contained a flaw that hackers could automate into a large-scale takeover campaign. The critical authentication bypass vulnerability takes advantage of a now-patched flaw in the Really Simple Security plug-in.

Bank Info Security 19 Nov 2024, 11:00 p.m. Authentication Bypass Flaw Patch Vulnerability Wordpress
Bank Info Security 1 year, 7 months ago

WordPress Plugin Vulnerability Threatens 4 Million Sites

Critical Authentication Flaw Impacts Both Free and Pro UsersA widely deployed five-in-one security plugin for WordPress websites contained a flaw that hackers could automate into a large-scale takeover campaign. The critical authentication bypass vulnerability takes advantage of a now-patched flaw in the Really Simple Security plugin.

Bank Info Security 19 Nov 2024, 11:00 a.m. Authentication Bypass Flaw Patch Vulnerability Wordpress
Bank Info Security 2 years, 2 months ago

Breach Roundup: LockBit Claims Wichita Attack

Also: New Attack Threatens VPN User Privacy; Android Malware Targets FinlandThis week, LockBit claimed responsibility for an attack, British Columbia probed an attack, the "TunnelVision" flaw threatened VPN users' privacy, a CEO was sentenced for a scam, attackers exploited a WordPress plug-in flaw, Zscaler probed a breach and Finland warned about Android malware scams.

Bank Info Security 10 May 2024, 7:00 a.m. Android Breach Finland Flaw LockBit Malware Privacy Scam VPN Wordpress Zscaler
Bank Info Security 2 years, 2 months ago

Breach Roundup: Cloud Error Reveals DPRK Sanctions Busting

Also: Hospitals Spend More on Cybersecurity; Critical Flaw in WordPressThis week, a cloud server error revealed sanction busting, Moody's said hospital cybersecurity spending is up, the U.S. restricted visas for commercial spyware operators, a ransomware attack hit a lab in Italy, hackers exploited a WordPress flaw, and Argentinian data is for sale on a criminal forum.

Bank Info Security 26 Apr 2024, 7:00 a.m. America Breach Cloud Critical Vulnerability Flaw Forums Healthcare Italy Ransomware Sanctions Spyware Wordpress