Kinsta includes Patchstack protection on every hosted WordPress site
Original title: Kinsta now protects every WordPress site it hosts with Patchstack
Patchstack says the feature blocked more than 1.5 million exploitation attempts across more than 68,000 Kinsta sites in its first weeks.
Kinsta now includes Patchstack-powered Vulnerability Protection on every hosting plan at no extra cost, with nothing for customers to install. The host matches each site’s WordPress, plugin and theme versions to Patchstack’s database and applies RapidMitigate rules only on affected sites. Rules block exploit traffic at the application layer without changing plugin or theme code and are removed after an update or deletion. Patchstack cites its own figures that 46% of WordPress vulnerabilities disclosed in 2025 had no vendor fix at disclosure.
Unconfirmed: The blocked-attempt total and 2025 WordPress vulnerability statistics are Patchstack’s own figures.
- Patchstack reports 11,334 new WordPress vulnerabilities in 2025, up 42% year over year.
- Plugins accounted for 91% of those vulnerabilities, according to Patchstack.
- Heavily targeted plugin flaws were mass-exploited in a median of five hours.
- Patchstack says it maintains more than 14,000 mitigation rules.
- Triggering 100 RapidMitigate rules takes 0.11ms on PHP 8+, Patchstack says.
- Vendors
- KinstaPatchstack
From the original article
3 min read at patchstack.com
Every WordPress site on Kinsta is now protected by Patchstack, automatically and at no extra cost. In its first weeks, that protection blocked more than 1. 5 million exploitation attempts across more than 68,000 Kinsta sites.
By Mart Virkus · patchstack.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.