WordPress Security Blog
Weekly vulnerability reports, security tips, and WordPress security news to keep your site safe.
Website Backups: The Safety Net Every WordPress Owner Needs but Few Get Right
A good backup can turn a disaster into a minor inconvenience. Learn why backups matter, the common mistakes that make them useless, and how to build a backup routine you can actually rely on.
Your WordPress Site Was Hacked: A Calm, Step-by-Step Recovery Plan
Finding out your site is hacked is stressful, but panic makes things worse. This plain-English recovery plan walks you through what to do first, how to clean up, and how to stay safe afterward.
10 Essential WordPress Security Tips Every Site Owner Must Know in 2025
Comprehensive guide to WordPress security: 10 critical practices covering updates, authentication, security headers, SSL, XML-RPC, login protection, backups, file permissions, monitoring, and DNS security.
WordPress Vulnerability Report: July 9 – July 16, 2026
203 WordPress vulnerabilities disclosed between July 9 – July 16, 2026. 11 critical, 49 high severity. 2 patched, 201 unpatched.
WordPress Vulnerability Report: July 8 – July 15, 2026
197 WordPress vulnerabilities disclosed between July 8 – July 15, 2026. 10 critical, 52 high severity. 2 patched, 195 unpatched.
WordPress Vulnerability Report: July 1 – July 8, 2026
103 WordPress vulnerabilities disclosed between July 1 – July 8, 2026. 9 critical, 37 high severity. 0 patched, 103 unpatched.
WordPress Vulnerability Report: June 26 – July 3, 2026
142 WordPress vulnerabilities disclosed between June 26 – July 3, 2026. 8 critical, 37 high severity. 2 patched, 140 unpatched.
WordPress Vulnerability Report: May 17 – May 24, 2026
81 WordPress vulnerabilities disclosed between May 17 – May 24, 2026. 8 critical, 20 high severity. 2 patched, 79 unpatched.
WordPress Vulnerability Report: May 9 – May 16, 2026
104 WordPress vulnerabilities disclosed between May 9 – May 16, 2026. 6 critical, 23 high severity. 1 patched, 103 unpatched.
WordPress Vulnerability Report: May 1 – May 8, 2026
96 WordPress vulnerabilities disclosed between May 1 – May 8, 2026. 6 critical, 35 high severity. 1 patched, 95 unpatched.