WordPress Security Blog
Weekly vulnerability reports, security tips, and WordPress security news to keep your site safe.
WordPress Vulnerability Report: July 13 – July 20, 2026
110 WordPress vulnerabilities disclosed between July 13 – July 20, 2026. 7 critical, 23 high severity. 1 patched, 109 unpatched.
WordPress Vulnerability Report: July 12 – July 19, 2026
103 WordPress vulnerabilities disclosed between July 12 – July 19, 2026. 8 critical, 26 high severity. 1 patched, 102 unpatched.
WordPress Vulnerability Report: July 11 – July 18, 2026
103 WordPress vulnerabilities disclosed between July 11 – July 18, 2026. 8 critical, 27 high severity. 1 patched, 102 unpatched.
WordPress 7.0.2 Release
WordPress 7.0.2 is now available. The 7.0.2 security release addresses one critical and one high severity security issue.
WordPress Vulnerability Report: July 10 – July 17, 2026
178 WordPress vulnerabilities disclosed between July 10 – July 17, 2026. 8 critical, 42 high severity. 1 patched, 177 unpatched.
Choosing a Secure WordPress Host: What Actually Matters
Your web host is the foundation your site's security is built on. Learn what separates a genuinely secure host from a cheap one, and the questions worth asking before you commit.
Website Security for Small Business Owners: A Plain-English Guide
You do not need to be technical to keep your business website safe. This plain-English guide explains why small businesses are targeted and the handful of habits that make the biggest difference.
Website Backups: The Safety Net Every WordPress Owner Needs but Few Get Right
A good backup can turn a disaster into a minor inconvenience. Learn why backups matter, the common mistakes that make them useless, and how to build a backup routine you can actually rely on.
Your WordPress Site Was Hacked: A Calm, Step-by-Step Recovery Plan
Finding out your site is hacked is stressful, but panic makes things worse. This plain-English recovery plan walks you through what to do first, how to clean up, and how to stay safe afterward.
Zero-Day Plugin Exploits on WordPress: Attacks Before a Patch Exists
A zero-day plugin exploit attacks a flaw before the developer has a fix. Learn what makes them dangerous and how to reduce your exposure to the unknown.