General WordPress and website security information to help protect your website
Cloudflare blog… On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta – threat actors were able to leverage an […]
How Cloudflare mitigated yet another Okta compromise Read More »
Wordfence has released a PSA about a critical vulnerability in a popular WordPress plugin: “Essential Addons for Elementor” On May 11 2023, Essential Addons for Elementor, a WordPress plugin with
Elementor Essential Addons Critical Vulnerability Read More »
Two security vulnerabilities recently found with the All in One SEO plugin The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters
All in One SEO Pack security vulnerabilities Read More »
More GoDaddy issues A series of breaches of domain name and web hosting company GoDaddy that dates back to 2020…More info: Web Hosting Company GoDaddy Hit by Malware, “Multi-Year” Breach
PHP 8.0 is a major update of the PHP language Many WordPress websites use PHP 7.4, or an older version. Security support for PHP 7.4 is ending on November 28,
It doesn’t look good for the super popular WordPress classic editor plugin. It was last updated over a year ago. Outdated plugins are a potential way for hackers to compromise
WordPress Classic Editor Plugin Read More »
Yet another reason I don’t use the Yoast SEO WordPress plugin Yoast SEO 19.7 Causes Fatal Error & Crashes Websites
Yoast SEO causes fatal error Read More »
Critical Remote Code Execution Vulnerability in Elementor As reported by one of my favorite WordPress security plugins “Wordfence” – Critical Remote Code Execution Vulnerability in Elementor If you use the
Elementor Critical Remote Code Execution Vulnerability Read More »
If you use the All in One WordPress SEO Plugin …you need to make sure it’s updated to at least version 4.1.5.3 As reported by many: The All in One
All in One SEO Plugin Read More »
According to Wordfence: GoDaddy Breached – Plaintext Passwords – 1.2M AffectedGoDaddy announced this morning that they have been breached. Checkout the full details on Wordfence: https://www.wordfence.com/blog/2021/11/godaddy-breach-plaintext-passwords This morning, GoDaddy disclosed
