Following Layoffs, Automattic Employees Discover Leak404 Media·Apr 16, 16:53 UTC · Apr 16, 2025Threat actor45
Employees Describe an Environment of Paranoia and Fear Inside Automattic Over WordPress Chaos404 Media·Oct 17, 17:37 UTC · Oct 17, 2024Ransomware45
Automattic Inc. Claims It Owns the Word 'Automatic'404 Media·Nov 6, 16:08 UTC · Nov 6, 2025Industry30
WordPress CEO Rage Quits Community Slack After Court Injunction404 Media·Dec 11, 17:10 UTC · Dec 11, 2024Policy & legal30
To Log Into WordPress, You Now Have To Agree Pineapple on Pizza Is Good404 Media·Dec 16, 15:47 UTC · Dec 16, 2024Industry30
WordPress Rushes Out Jetpack Patch to MillionsInfosecurity Magazine·May 31, 10:00 UTC · May 31, 2023Vulnerability in the wild60
WordPress iOS App Bug Leaked Secret Access Tokens to ThirdThe Hacker News·Apr 3, 14:54 UTC · Apr 3, 2019Vulnerability30
WordPress plugin Jetpack fixes nearly decadeThe Record·Oct 15, 14:11 UTC · Oct 15, 2024Exploit / PoC in the wild60
‘The Community Is In Chaos:’ WordPress.org Now Requires You Denounce Affiliation With WP Engine To Log In404 Media·Oct 10, 15:34 UTC · Oct 10, 2024Industry30
WordPress announces bug bounty programHelp Net Security·Nov 21, 07:55 UTC · Nov 21, 2023Vulnerability42
Critical flaw in WooCommerce Payments plugin allows site takeoverSecurity Affairs·Mar 24, 14:45 UTC · Mar 24, 2023Exploit / PoC in the wild60
Dlaw in WooCommerce Plugin could be exploited to take over estoresSecurity Affairs·Nov 7, 19:25 UTC · Nov 7, 2018Exploit / PoC60
FTC warns 12 major tech firms of violating Take It Down ActThe Record·May 20, 17:37 UTC · May 20, 2026Policy & legal42
Here’s how the FTC plans to enforce the Take It Down ActCyberScoop·May 15, 19:54 UTC · May 15, 2026Policy & legal in the wild60
LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress WebsitesThe Hacker News·Oct 31, 10:24 UTC · Oct 31, 2024VulnerabilityCVE-2024-50550CVE-2024-28000CVE-2024-44000+3 CVEs160
WordPress Jetpack plugin critical flaw impacts 27 million sitesSecurity Affairs·Oct 15, 09:43 UTC · Oct 15, 2024Exploit / PoC in the wild60
WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million SitesThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Vulnerability in the wild60
Network Security Trends: AugustPalo Alto Unit 42·Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438CVE-2021-34473CVE-2021-38647+9 CVEs60
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress SitesThe Hacker News·May 8, 14:05 UTC · May 8, 2024Vulnerability in the wildCVE-2023-4000060
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress SitesThe Hacker News·Apr 27, 04:59 UTC · Apr 27, 2024VulnerabilityCVE-2024-27956CVE-2024-2876CVE-2024-28890+2 CVEs160
Recent ‘MFA Bombing’ Attacks Targeting Apple UsersKrebs on Security·Apr 2, 20:30 UTC · Apr 2, 2024Threat actor45
Tumblr and WordPress to Sell Users’ Data to Train AI Tools404 Media·Feb 28, 00:46 UTC · Feb 28, 2024Threat actor145
WooCommerce Patches Critical Plugin Flaw Affecting Half a Million SitesInfosecurity Magazine·Mar 24, 17:00 UTC · Mar 24, 2023Vulnerability in the wild60
Nord Security raises $100 million to secure consumers and companies against advanced cyberthreatsHelp Net Security·Apr 15, 00:00 UTC · Apr 15, 2022Data breach57
Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million SitesThe Hacker News·Feb 19, 06:25 UTC · Feb 19, 2022VulnerabilityCVE-2022-063360
Flaws in Two Popular WordPress Plugins Affect Over 7 Million WebsitesThe Hacker News·Mar 18, 06:59 UTC · Mar 18, 2021Vulnerability42
Russian Who Hacked LinkedIn, Dropbox Sentenced to 7 Years in PrisonThe Hacker News·Oct 1, 10:00 UTC · Oct 1, 2020Policy & legal30
Yevgeniy Aleksandrovich Nikulin sentenced to 88 months in prisonSecurity Affairs·Sep 30, 17:53 UTC · Sep 30, 2020Policy & legal30
A critical flaw in Jetpack exposes millions of WordPress sitesSecurity Affairs·Nov 21, 14:54 UTC · Nov 21, 2019Exploit / PoC in the wild60
Popular WooCommerce WordPress Plugin Patches Critical VulnerabilityThe Hacker News·Nov 7, 09:01 UTC · Nov 7, 2018Vulnerability55
Let's Encrypt has already issued one Million certificatesSecurity Affairs·Mar 5, 22:41 UTC · Mar 5, 2018Industry30
Million wordpress websites vulnerable to DOMSecurity Affairs·May 7, 06:19 UTC · May 7, 2015Exploit / PoC45