WordPress Security Research and News
May 21st, 2026
Critical WordPress Plugin Vulnerability Patched: What You Need to Do Right Now
If you use WordPress, you’ve probably seen news about a plugin vulnerability being discovered and patched. It happens more often than most website own...
May 14th, 2026
2026 WordPress Security Trends and Predictions
WordPress now powers around 43.5% of all websites on the internet, making it one of the biggest targets for cyberattacks. Every day, thousands of webs...
February 1st, 2026
VMP™ Intelligence Weekly WordPress Security Report
Last week we saw 3.2 vulnerabilities discovered and reported across the WordPress ecosystem.
February 1st, 2026
100,000 WordPress Sites Hacked Via This Backdoor Plugin
Security researchers have uncovered a massive campaign targeting WordPress sites through a backdoor plugin.
February 1st, 2026
VMP™ Bug Bounty Program Monthly Report
VMP™ Bug Bounty Program receives more than 100 security vulnerability submissions this month from researchers.
February 1st, 2026
VMP™ Intelligence Weekly WordPress Vulnerability Report
Last week saw substantial increase in attempted attacks. Our security team has been actively monitoring these trends.
February 1st, 2026
Attackers Actively Exploiting Critical WP Plugin Vulnerability
Threat researchers at Company LLC Extension vulnerability is being actively exploited in the wild targeting admins.
February 1st, 2026
100,000 WordPress Sites Infected Via Balada Injector Compromised WordPress Plugin
Balada Injector malware campaign has infected more than 100K WordPress sites compromised through plugin flaws.