South African payment gateway Bob Pay has fixed problematic code in its WooCommerce plugin after its listing in the WordPress plugin directory was suspended pending an investigation into a guideline ...

WPvivid Backup & Migration plugin vulnerable to critical RCE flaw CVE-2026-1357 Exploitation requires “receive backup from another site” option enabled, with 24 ...

Learn how to create 3D animated iPhone text messages in After Effects without using any plugins. This step-by-step tutorial is perfect for making viral text animations for social media, YouTube, or ...

Small Business Technology News #1 – As AI search hits 700M users, new WordPress tool democratizes 'AI SEO' for small businesses. A new WordPress plugin called LovedByAIhas launched to help small ...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...

The problem came from missing input sanitization and output escaping in how the plugin handled the shortcode_debug parameter. These are basic security steps that protect sites from harmful input and ...

A sophisticated malware campaign is targeting WordPress websites, leveraging the often-overlooked mu-plugins directory to establish persistent backdoors. This cunning approach utilizes a multi-layered ...

The Forminator plugin for WordPress is vulnerable to an unauthenticated arbitrary file deletion flaw that could enable full site takeover attacks. The security issue is tracked as CVE-2025-6463 and ...

Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin. The plugin, which goes by the name "WP-antymalwary-bot.php," ...

A critical vulnerability in the WordPress plugin SureTriggers has exposed thousands of websites to remote attacks, allowing unauthenticated users to create administrative accounts. SureTriggers ...

Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code on every page while evading detection. The technique was first observed by security ...