Erik Kraijenoord Apache has released a fix for a critical vulnerability in the HTTP/2 module of Apache HTTP Server. The issue, CVE-2026-119618, can lead to remote code execution on affected servers. If your WordPress site is hosted on Apache, check your host’s website or announcements to see if they have already fixed this. If you can’t find … Read more
Last week, there were 497 vulnerabilities disclosed in 312 WordPress Plugins and 1 WordPress Theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with … Read more
Wordfence 9.1.0 is now available. It adds the new Wordfence Security News Widget, which brings the latest WordPress security alerts and research to your dashboard, plus faster firewall rule updates, sharper firewall request parsing, Live Traffic logging for application password and REST API login failures, configurable attack alert thresholds, and additional features, fixes and improvements. … Read more
Next year, WordCamp Asia 2027 heads to Penang, Malaysia. From April 9 to 11, the WordPress community will gather at the Penang Waterfront Convention Centre for three days of contribution, learning, and connection. Tickets are on sale and sponsorship applications are open, so now is the time to make your plans. Get Your Event Pass … Read more
WordPress 7.2 Beta 5 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to Test WordPress 7.2 Beta … Read more
