This website uses cookies, pixels, and similar technologies (collectively “Cookies”) to improve your browsing experience. By clicking “Accept All”, you agree to the storing of Cookies on your device and that we may share, track, store, and analyze your interactions with the website to enhance site navigation, analyze site usage, and assist in our marketing efforts. For more information on our use of cookies please review our Cookie Policy.
The Latest WordPress Security News for January 2026: Presented by the Wordfence Threat Intelligence team.
Follow Wordfence On Your Favorite Social Media Platform
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 19, 2026 to January 25, 2026)
Last week, there were 215 vulnerabilities disclosed in 180 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database,…
-
Wordfence Bug Bounty Program Monthly Report – December 2025
Last month in December 2025, the Wordfence Bug Bounty Program received 759 vulnerability submissions from our growing community of security researchers working to improve the…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 12, 2026 to January 18, 2026)
Last week, there were 170 vulnerabilities disclosed in 123 WordPress Plugins and 37 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database,…
-
20,000 WordPress Sites Affected by Backdoor Vulnerability in LA-Studio Element Kit for Elementor WordPress Plugin
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than…
-
100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Advanced Custom Fields: Extended WordPress Plugin
On December 10th, 2025, we received a submission for a Privilege Escalation vulnerability in Advanced Custom Fields: Extended, a WordPress plugin with more than 100,000+…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)
Last week, there were 264 vulnerabilities disclosed in 214 WordPress Plugins and 31 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database,…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026)
Over the past three weeks, there were 459 vulnerabilities disclosed in 390 WordPress Plugins and 29 WordPress Themes that have been added to the Wordfence…
-
10,000 WordPress Sites Protected Against Site Reset and Privilege Escalation Vulnerability in Demo Importer Plus WordPress Plugin
On November 27th, 2025, we received a submission for a Site Reset and Privilege Escalation vulnerability in Demo Importer Plus, a WordPress plugin with more…
Check out our database for a full list of WordPress plugin vulnerabilities.
Every week, the Wordfence team publishes unique threat intelligence data, research, alerts and threat analysis to the public WordPress community as part of our commitment to a Defense In Depth approach to security.
📭 Get the Latest WordPress Security News, Alerts and Updates Sent to Your Inbox Weekly:
Join The WordPress Security Mailing List
WordPress Security News Archives:
These stories and more can be found on the Wordfence Blog.
- WordPress Security News December 2025
- WordPress Security News November 2025
- WordPress Security News October 2025
WordPress Security Video Highlights:
Plugin vulnerability alerts and summaries from the Wordfence Youtube Channel.