Wordfence Research and News

Blog icon
Newest

WordPress Security Research: A Beginner’s Series

Learn How To Find WordPress Vulnerabilities Step-by-Step Welcome to the inaugural post of our WordPress Security Research Beginner’s Series! With the success of the Wordfence Bug Bounty Program, we wanted to provide emerging vulnerability researchers, and experienced Bug Bounty Hunters, with a comprehensive guide that is designed to equip them with the necessary skills and …
Read More

Duplicator Update Patches Remote Code Execution Flaw

A critical remote code execution (RCE) vulnerability has been patched in the latest release of Duplicator, a WordPress backup and migration plugin with millions of downloads.

Ninja Forms Security Updates: What You Need To Know

Yesterday, the popular WordPress plugin Ninja Forms released version 3.3.14, which disclosed and patched two security issues present in the plugin.

Arbitrary File Deletion Flaw Present in WordPress Core

The security community has been abuzz this week following the disclosure of a vulnerability present in all current versions of WordPress.

Is WordPress Secure?

I recently got a call from a friend I haven’t seen for a while asking me if I’d like to grab a coffee.

Your Site Reputation Makes You a Target

I’ve mentioned Troy Hunt a few times on this blog. He’s one of the good guys in our industry and runs a website called haveibeenpwned.com.

Ask Wordfence Episode 2: How to Secure an Old Version of WordPress

Today we are publishing episode 2 of our “Ask Wordfence” series.

The April 2017 WordPress Attack Report

Today we are releasing the WordPress Attack Report for April, 2017.

Home Router Botnet Shut Down in Past 72 Hours. Who did it?

On April 11th, 3 weeks ago, we published a story discussing routers at a specific set of ISPs that have been hacked.

20 Minutes to a Secure WordPress Website

Securing WordPress has become easy thanks to the amazing work the WordPress team continuously do to fix vulnerabilities and improve the security of the platform.