All articles in the "Security" category. 47 articles.
No articles match your search. Try another word.
Many people think only plugins are dangerous. Yet in 2024 the popular Bricks builder/theme let strangers run their own code on the server, without logging in.
Read more →
Pure irony: a popular security plugin on 4 million sites had a flaw that let you log in as any user, including the administrator.
Read more →
A popular file management plugin had a flaw that let a stranger upload their own code to the server. Without logging in. Bots started exploiting it within hours.
Read more →
In 2017 a small bug in WordPress let strangers edit any post on a site, without logging in. Within days the content of over 1.5 million pages was rewritten. Here is what the story teaches.
Read more →
A new flaw on the WordPress login screen (CVE-2026-64638) can, in the worst case, lead to PHP code execution on the server. It affects almost every version. The fix is in 7.0.3, see what to do.
Read more →
The most common way into a site is not a sophisticated attack, but a weak password. Here is how to close that door in a few minutes, a password manager and two-factor login in plain words.
Read more →