Tag: Patchstack

Two critical PHP flaws leaked before the October 21 security release at 14:00 UTC. What is known and what hosts can prepare.

Attackers are targeting Ninja Forms and WPC Product Bundles with a payload built to hide its own WordPress admin and outlast plugin removal.

WordPress 7.1.1 was planned as bug-fix only and shipped with 11 security fixes, one an anonymous comment XSS the sanitizer does not catch.

Exploit attempts against the Elementor Pro file upload flaw began the day it was disclosed, and one firewall alone blocked over 190,000 of them.

High-severity fixes for All-in-One WP Migration and Gravity Forms shipped August 20. One changelog called it a text fix, the other used a stock phrase.

WordPress 7.0.4 fixes a flaw where an image hiding PostScript runs code on the server. It needs an author account, and multi-author sites should hurry.

An AI model found the WordPress core flaw in ten hours for about $25. After 7.0.2 shipped, attacks started 90 minutes later. WordPress 7.0.3 is out.

Hostinger's default npm scanning flagged vulnerable dependencies on 10,000+ sites in weeks. Patchstack and Hostinger on what it catches and what it misses.

Hostinger built Patchstack's npm dependency scanning into its Node.js hosting, on by default, targeting the supply-chain risk of fast-shipped, AI-assisted apps.

GoDaddy joined Patchstack's full-integration partner tier in April 2026. Most major managed WordPress hosting brands already use the Estonian vendor.