Tag: wordpress

Only 35 percent of All-in-One WP Migration installs run the 7.110 fix. About 3.2 million sites are on a vulnerable version as the exploit chain goes public.

Exploit attempts against the Elementor Pro file upload flaw began the day it was disclosed, and one firewall alone blocked over 190,000 of them.

High-severity fixes for All-in-One WP Migration and Gravity Forms shipped August 20. One changelog called it a text fix, the other used a stock phrase.

InMotion is deploying Monarx ThreatShield across its server fleet, moving attack blocking into the PHP engine itself.

Four companies at WordCamp US split on how far AI should go, and two of them want two-factor authentication built into WordPress core.

Forminator's 9.8 file upload flaw was patched seventeen days before it went public, and the changelog shows eleven more fixes around it.

WordPress 7.0.4 fixes a flaw where an image hiding PostScript runs code on the server. It needs an author account, and multi-author sites should hurry.

Google's field data, broken out by host: Wix customers pass Core Web Vitals at 80%, HostGator's at 39%. A measured speed ranking for the industry.

An AI model found the WordPress core flaw in ten hours for about $25. After 7.0.2 shipped, attacks started 90 minutes later. WordPress 7.0.3 is out.

WordPress did the rare thing and forced a core security fix to millions of sites. Within 72 hours the break-ins started anyway. The gap is the story.