A high-severity vulnerability was discovered and patched in the All-in-One WP Migration and Backup plugin, which has over five million installations. The vulnerability requires no user authentication, ...

Don't blog without the proper protections in place, folks.

Dozens of WordPress plugins were allegedly hijacked to push malware after they were sold to a new corporate owner.

Microsoft Bing has published a new WordPress plugin that makes it easy to integrate your WordPress blog and site with the IndexNow protocol. The plugin was released over the holidays and is available ...

A critical vulnerability has been reported in WPML — a multilingual WordPress plugin with more than a million installations globally — that allows remote code execution on affected WordPress sites.

Dozens of WordPress plugins have been compromised by an unknown actor who planted backdoors in popular add-ons after buying ...

Dozens of WordPress plugins were taken offline after a suspected supply-chain attack involving a malicious backdoor added ...