Fake WordPress PBN plugin hides malware in the database
A recent Sucuri investigation has uncovered a layered WordPress infection that used a fake plugin,…
WordPress
May 2026 WordPress vulnerability roundup: what site owners need to know
WordPress security is not just a technical concern. A single unpatched plugin or theme can…
April 2026 WordPress vulnerability roundup: what site owners need to know
Keeping a WordPress website secure is not a one-off job. Plugins, themes and page builders…
WordPress vulnerability roundup: what March 2026 means for your website
WordPress security is not just a technical issue. When a plugin or theme vulnerability is…
WordPress vulnerability roundup: what February 2026 means for your website
WordPress security is easy to put off when a website appears to be working normally….
Shadow directories: a quiet way to hijack WordPress permalinks
We’re seeing a crafty SEO-spam tactic against WordPress sites: attackers create shadow directories that mimic…
WordPress vulnerability & patch roundup – January 2026
Automated attacks love known weaknesses. January saw a steady flow of WordPress plugin vulnerabilities –…
Fake “Java Update” pop-up hidden inside a malicious WordPress plugin
A new social-engineering tactic is targeting WordPress sites with a convincing “Java Update” pop-up. It…
Google sees spam, you see your site: cloaked SEO spam explained
Some attacks don’t vandalise your pages. Instead, they quietly turn your website into a mouthpiece…
Fake browser update pop-ups targeting WordPress administrators
A new social-engineering campaign is abusing a malicious WordPress plugin to show convincing fake browser…