Organization

WordPress

1 mentions in 7 days · 1 in 30 days · 2 total · first seen Aug 15, 2026 · last 4d ago

Timeline2 articles

WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review

WordPress.org now runs AI-powered automated security reviews on every plugin release, automatically blocking high-risk updates before distribution to millions of sites.

WordPress launched an automated security review that combines multiple AI models and Jetpack Scan during a six-hour cooldown to score each plugin release; updates above the blocking threshold are automatically held back from the WordPress.org update API. The change follows a July 28 incident where a backdoor added to a plugin with roughly 20,000 active installations was detected during cooldown and never delivered; the Plugins Team removed it 26 minutes after a Wordfence notification. Blocked developers receive an email with findings and are advised to publish a corrected version rather than await manual appeal.

GBHackersupdated Sep 11, 16:33 UTC · 4d agofirst Sep 11, 05:49 UTC · 4d agoTools 7 sources

Wordpress Fixes Critical Plugin

WordPress maintainers patched a critical vulnerability in a widely used plugin, urging site owners to update before potential exploitation.

WordPress has released a fix for a critical vulnerability affecting one of its plugins, per Infosecurity Magazine. Plugins in the WordPress ecosystem often power millions of sites, making timely patching important to limit exposure. The available information does not specify a CVE identifier, affected versions, or whether exploitation has been observed.

Infosecurity MagazineAug 15, 00:00 UTC · Aug 15, 2026Vulnerability

Appears with

vendor WordPress 2 product Jetpack Scan 1 product WordPress 1 organization Wordfence 1 vendor Jetpack 1 vendor Wordfence 1 product WordPress.org update API 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.