WordPress Security Blog
Weekly vulnerability reports, security tips, and WordPress security news to keep your site safe.
10 Essential WordPress Security Tips Every Site Owner Must Know in 2025
Comprehensive guide to WordPress security: 10 critical practices covering updates, authentication, security headers, SSL, XML-RPC, login protection, backups, file permissions, monitoring, and DNS security.
WordPress Vulnerability Report: July 9 – July 16, 2026
203 WordPress vulnerabilities disclosed between July 9 – July 16, 2026. 11 critical, 49 high severity. 2 patched, 201 unpatched.
WordPress Vulnerability Report: July 8 – July 15, 2026
197 WordPress vulnerabilities disclosed between July 8 – July 15, 2026. 10 critical, 52 high severity. 2 patched, 195 unpatched.
WordPress Vulnerability Report: July 1 – July 8, 2026
103 WordPress vulnerabilities disclosed between July 1 – July 8, 2026. 9 critical, 37 high severity. 0 patched, 103 unpatched.
WordPress Vulnerability Report: June 26 – July 3, 2026
142 WordPress vulnerabilities disclosed between June 26 – July 3, 2026. 8 critical, 37 high severity. 2 patched, 140 unpatched.
WordPress Vulnerability Report: May 17 – May 24, 2026
81 WordPress vulnerabilities disclosed between May 17 – May 24, 2026. 8 critical, 20 high severity. 2 patched, 79 unpatched.
WordPress Vulnerability Report: May 9 – May 16, 2026
104 WordPress vulnerabilities disclosed between May 9 – May 16, 2026. 6 critical, 23 high severity. 1 patched, 103 unpatched.
WordPress Vulnerability Report: May 1 – May 8, 2026
96 WordPress vulnerabilities disclosed between May 1 – May 8, 2026. 6 critical, 35 high severity. 1 patched, 95 unpatched.
WordPress Vulnerability Report: April 15 – April 16, 2026
24 WordPress vulnerabilities disclosed between April 15 – April 16, 2026. 2 critical, 4 high severity. 0 patched, 24 unpatched.
WordPress Vulnerability Report: April 8 – April 15, 2026
106 WordPress vulnerabilities disclosed between April 8 – April 15, 2026. 6 critical, 18 high severity. 0 patched, 106 unpatched.