WordPress security articles, guides, and announcements.
A developer copies the full contents of a sketchy plugin file, pastes it into ChatGPT, and types four words: "is this safe?" The model thinks for a second and replies, "Yes, this code looks secure and...
Veracode tested over 100 large language models on security-sensitive coding tasks, and 45% of the AI-generated code introduced an OWASP Top 10 vulnerability. That isn't a rounding error. It's close to...
Roughly 76% of newly observed malware now exhibits AI-driven polymorphism, regenerating itself in real time to dodge whatever scanned it last. That single number explains why so many WordPress sites g...
It's 9:14 on a Tuesday morning. You open your inbox and the second email stops you cold. The subject line reads "Urgent: Malware detected on yourdomain.com." The sender looks like your host. The logo...
In March 2026 alone, security researchers logged 35 new vulnerabilities in AI-generated WordPress plugins. That single month produced more flaws than the entire second half of 2025. The tooling that w...
Researchers disclosed more than 40 CVEs against Model Context Protocol implementations in 2026, roughly one every four days, spread across the Python, TypeScript, Java, and Rust SDKs. That's a brand n...
Week 3 of May 2026 (May 11 to May 17) added 78 new vulnerabilities to the WordPress ecosystem across 62 plugins and 2 themes. Of those, 66 are patched and 12 remain unpatched at time of writing. The h...
The fastest way to turn a healthy WordPress site into a $50,000 cloud bill is to leak an AI API key. The fastest way to find out you've leaked one is when the bill arrives. The five minutes between th...
In February 2026, an anonymous developer running a Mexico-based startup discovered their Google Gemini API key had been compromised. Within 48 hours, attackers had run up $82,314.44 in unauthorized ch...
WordPress 7.0 shipped on May 20, 2026. Three days after release, Patchstack founder Oliver Sild published the first AI-related security report against it: the new AI integration setup form lets the br...