WordPress Güvenlik
Son güncelleme| Konu | |
|---|---|
| Sabit CVE-2026-119977 — WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WordPress WordPress Core |
|
| Sabit CVE-2026-87902 — WordPress Core Remote File Inclusion Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WordPress Core |
|
| Sabit CVE-2026-60137 — WordPress Core SQL Injection Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WordPress Core |
|
| Sabit CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WordPress Core |
|
| Sabit CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
Fidye yazılımı CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WebPros cPanel & WHM and WP2 (WordPress Squared) |
|
| WF | Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026) Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this repo… Wordfence · |
| WF | Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing several security issues, most notably an Unauthenticated Remote Code Exe… Wordfence · |
| WF | Wordfence Price Increase Coming December 3, 2026 On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase. We’re announcing this change a month in advance so you have time to purchase new licenses or renew eligible subscriptions at… Wordfence · |
| WF | HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, includ… Wordfence · |
| WF | WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead… Wordfence · |
| WF | Wordfence Bug Bounty Program Monthly Report – July 2026 In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These… Wordfence · |
| WF | Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026) Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this repo… Wordfence · |
| WF | PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. Wordfence · |
| WP | WordPress 7.1.4 This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPress.org, or visit your W… WordPress.org · |
| WF | Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem The Wordfence Threat Response Team is a new small, technically hands-on team responsible for turning rapidly emerging threats into customer protection and clear customer guidance. Spot an active threat? Report it directl… Wordfence · |
| WF | Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026) Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this repo… Wordfence · |
| WP | Critical PHP Security Release The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immediately update their inst… WordPress.org · |
| WP | WordPress 7.1.3 Maintenance and Security Release This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPre… WordPress.org · |
| WP | WordPress 7.1.2 Release This security release features a fix for a critical severity security vulnerability. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.2 from Wor… WordPress.org · |
| WP | WordPress 7.1.1 Maintenance and Security Release This security and maintenance release features 17 bug fixes on Core, 19 bug fixes for the Block Editor, and 11 security fixes. Because this is a security release, it is recommended that you update your sites immediately.… WordPress.org · |
| WP | WordPress 7.0.4 Release WordPress 7.0.4 is now available WordPress 7.0.4 is now available which features a security fix. Because this is a security release, it is recommended that you update your sites immediately. You can update to WordPress 7… WordPress.org · |
Başlıklar ve kısa özetler kaynakların herkese açık RSS akışlarından otomatik alınır; tüm hakları kaynaklarına aittir. Konular 30 dakikada bir yenilenir.