WordPress Security Blog
Weekly vulnerability reports, security tips, and WordPress security news to keep your site safe.
WordPress Vulnerability Report: May 17 – May 24, 2026
81 WordPress vulnerabilities disclosed between May 17 – May 24, 2026. 8 critical, 20 high severity. 2 patched, 79 unpatched.
WordPress Vulnerability Report: May 9 – May 16, 2026
104 WordPress vulnerabilities disclosed between May 9 – May 16, 2026. 6 critical, 23 high severity. 1 patched, 103 unpatched.
WordPress Vulnerability Report: May 1 – May 8, 2026
96 WordPress vulnerabilities disclosed between May 1 – May 8, 2026. 6 critical, 35 high severity. 1 patched, 95 unpatched.
WordPress Vulnerability Report: April 15 – April 16, 2026
24 WordPress vulnerabilities disclosed between April 15 – April 16, 2026. 2 critical, 4 high severity. 0 patched, 24 unpatched.
WordPress Vulnerability Report: April 8 – April 15, 2026
106 WordPress vulnerabilities disclosed between April 8 – April 15, 2026. 6 critical, 18 high severity. 0 patched, 106 unpatched.
WordPress Vulnerability Report: April 1 – April 8, 2026
40 WordPress vulnerabilities disclosed between April 1 – April 8, 2026. 2 critical, 12 high severity. 0 patched, 40 unpatched.
Why WordPress Sites Get Hacked: The Most Common Reasons and How to Avoid Them
Over 90,000 WordPress sites are attacked every minute. Learn the top reasons WordPress sites get hacked and what you can do to prevent it from happening to yours.
SQL Injection Attacks on WordPress: How Hackers Exploit Database Vulnerabilities
SQL injection remains one of the most dangerous vulnerabilities in WordPress plugins and themes. Learn how these attacks work and how to protect your database.
Cross-Site Scripting (XSS) Attacks on WordPress: How They Work and How to Prevent Them
XSS is one of the most common web vulnerabilities affecting WordPress. Learn how attackers inject malicious scripts and what you can do to protect your site.
WordPress Vulnerability Report: March 5 – March 8, 2026
61 WordPress vulnerabilities disclosed between March 5 – March 8, 2026. 4 critical, 13 high severity. 1 patched, 60 unpatched.