Inspiring the global community The atmosphere was electric at WordCamp Europe (WCEU) 2023 in Athens, Greece, as WordPress celebrated its 20th anniversary and the opportunity to gather in person for inspiration and engagement. More than 2,500 individuals from 94 countries came together in person or through the live stream to participate in a remarkable three-day … Read more
Last week, there were 116 vulnerabilities disclosed in 88 WordPress Plugins and 3 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 35 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with … Read more
Alongside our usual work to discover, report, and remediate vulnerabilities in the WordPress ecosystem, the WordPress Threat Intelligence team has been conducting a deep-dive into WordPress plugin code with the objective of finding methods to bypass authentication and gain elevated privileges in WordPress plugins so we can help developers patch these vulnerabilities before threat actors … Read more
On April 6, 2023, the Wordfence Threat Intelligence team initiated the responsible disclosure process for two vulnerabilities in Getwid – Gutenberg Blocks, a plugin installed on over 50,000 WordPress sites. The plugin’s developers responded immediately, and we sent over the full disclosure the same day. A patched version of the plugin, 1.8.4, was released on … Read more
May has been a month of celebrating WordPress and the open source community that makes it possible. In honor of the project’s 20th anniversary, WordPress Executive Director Josepha Haden Chomphosy reflected on this journey and the opportunity to build a better future for those who come after: The more our community invests in itself and … Read more
