Category: WordPress Security
-
UpdraftPlus security incident: who is affected and what to do now
Over the weekend of 17-18 October someone gained unauthorised access to the maker of UpdraftPlus. The leaked connection keys can send commands to your site. Who only needs a new password, and who has to act today.
-
Vulnerabiltiy in AI Engine for WordPress plugin
In July 2025, the Wordfence security team identified a critical arbitrary file upload vulnerability in the AI Engine plugin for WordPress, affecting approximately 100,000 active installations. This flaw allowed attackers to upload arbitrary files (e.g., PHP) without authentication, potentially leading…