Tag: wordpress

Forminator's 9.8 file upload flaw was patched seventeen days before it went public, and the changelog shows eleven more fixes around it.

WordPress 7.0.4 fixes a flaw where an image hiding PostScript runs code on the server. It needs an author account, and multi-author sites should hurry.

Google's field data, broken out by host: Wix customers pass Core Web Vitals at 80%, HostGator's at 39%. A measured speed ranking for the industry.

An AI model found the WordPress core flaw in ten hours for about $25. After 7.0.2 shipped, attacks started 90 minutes later. WordPress 7.0.3 is out.

WordPress did the rare thing and forced a core security fix to millions of sites. Within 72 hours the break-ins started anyway. The gap is the story.

A flaw in WordPress core hands strangers the keys to your site, no password required, and attackers are already walking through the door. It is already being exploited.

Extendify on the five experience gaps that quietly drive hosting customers to churn, and how to close each one.

In one July week, three unauthenticated file-handling flaws surfaced across WordPress plugins and a web FTP client, all rooted in validation by shortcut.

Automattic has taken control of WebHosting.com, a premium one-word domain formerly held by AT&T, now showing an Automattic-branded "coming soon" page.

Pressable's June MCP update lets AI agents run backups, SSL, WP-CLI and bulk operations across WordPress hosting, moving agents from content into infrastructure.