Automattic reportedly has new board members, advisers, and counsel after the old board failed to oust CEO Matt Mullenweg.

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.

WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable ...

For those maintaining multiple WordPress sites. The WordPress 7.1.2 update released on September 22 is not an update you can ...

WordPress 7.1.1 fixes Click2Shell, which can force theme installs from crafted links and was chained with a theme flaw for code execution.

CVE-2026-87902: Hackers deployed PHP webshells on WordPress servers within 48 hours of the September 22 security patch, with ...

None ...

Many blogs and media outlets operate by writing articles in Google Docs and publishing them in WordPress. This is especially ...

WordPress flaw that enabled a path to Remote Code Execution (RCE) was patched all the way back to version 4.8, but the real-world attacks have only increased.

WordPress.com is offering eligible students a free Student plan for 12 months, giving them advanced web-building tools as it ...

WordPress released two security updates on Tuesday. The critical vulnerability from the second is already being exploited.

Hackers are breaking into websites that run vulnerable versions of the popular blogging software WordPress, according to several cybersecurity firms. One estimate puts the number of vulnerable ...