This website uses cookies, pixels, and similar technologies (collectively “Cookies”) to improve your browsing experience. By clicking “Accept All”, you agree to the storing of Cookies on your device and that we may share, track, store, and analyze your interactions with the website to enhance site navigation, analyze site usage, and assist in our marketing efforts. For more information on our use of cookies please review our Cookie Policy.
Latest WordPress Security News for November 2025: presented by the Wordfence Threat Intelligence team.
Follow Wordfence On Your Favorite Social Media Platform
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)
Last week, there were 140 vulnerabilities disclosed in 129 WordPress Plugins and 1 WordPress Theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 58 Vulnerability…
-
Wordfence Bug Bounty Program Monthly Report – October 2025
Last month in October 2025, the Wordfence Bug Bounty Program received 486 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 10, 2025 to November 16, 2025)
Last week, there were 106 vulnerabilities disclosed in 100 WordPress Plugins and 1 WordPress Theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 48 Vulnerability…
-
Attackers Actively Exploiting Critical Vulnerability in Post SMTP Plugin
On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations. This…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 3, 2025 to November 9, 2025)
Last week, there were 110 vulnerabilities disclosed in 101 WordPress Plugins and no WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 56 Vulnerability…
-
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 27, 2025 to November 2, 2025)
Last week, there were 76 vulnerabilities disclosed in 62 WordPress Plugins and 8 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 47 Vulnerability…
-
100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in AI Engine WordPress Plugin
On October 4th, 2025, we received a submission for a Sensitive Information Exposure vulnerability in AI Engine, a WordPress plugin with more than 100,000 active installations.
-
400,000 WordPress Sites Affected by Account Takeover Vulnerability in Post SMTP WordPress Plugin
On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations.
See the most up-to-date WordPress plugin and theme security updates in the Wordfence Intelligence Dashboard.
Every week, the Wordfence team publishes unique threat intelligence data, research, alerts and threat analysis to the public WordPress community as part of our commitment to a Defense In Depth approach to security.
📭 Get the Latest WordPress Security News, Alerts and Updates Sent to Your Inbox Weekly
Join The WordPress Security Mailing List
These stories and more can be found on the Wordfence Blog.
Recent WordPress Security News:
November Video Highlights:
Each week we also publish the latest news, alerts, updates and educational videos to the Wordfence Youtube channel.