56,966 blogs · [ { "id": "01a0e497-6405-7289-8173-51387b63798c", "title": "WPScan 4.0.0: We’re Back", "url": "https://wpscan.com/blog/wpscan-4-0-0-were-back/", "published_at": "2026-05-20T16:55:25+00:00" }, { "id": "01a0e497-6405-7289-8173-51387c3db87a", "title": "Unauthorized Plugin Installation/Activation in Hunk Companion", "url": "https://wpscan.com/blog/unauthorized-plugin-installation-activation-in-hunk-companion/", "published_at": "2024-12-10T21:03:51+00:00" }, { "id": "01a0e497-6405-7289-8173-51387c7be572", "title": "Identifying Traffic from Shell Finder Bots", "url": "https://wpscan.com/blog/identifying-traffic-from-shell-finder-bots/", "published_at": "2024-11-01T23:04:58+00:00" }, { "id": "01a0e497-6405-7289-8173-51387d4ce868", "title": "Unpatched Vulnerability in TI WooCommerce Wishlist Plugin", "url": "https://wpscan.com/blog/unpatched-vulnerability-in-ti-woocommerce-wishlist-plugin/", "published_at": "2024-09-09T17:45:04+00:00" }, { "id": "01a0e497-6405-7289-8173-51387da58383", "title": "Unauthenticated Privilege Escalation in Profile-Builder plugin", "url": "https://wpscan.com/blog/unauthenticated-privilege-escalation-in-profile-builder-plugin/", "published_at": "2024-07-15T16:29:52+00:00" }, { "id": "01a0e497-6405-7289-8173-51387e298a91", "title": "Object Injection vulnerability fixed in SEOPress 7.9", "url": "https://wpscan.com/blog/object-injection-vulnerability-fixed-in-seopress-7-9/", "published_at": "2024-06-24T14:00:00+00:00" }, { "id": "01a0e497-6405-7289-8173-51387e7912d7", "title": "10 of the Best Website Security Tools to Stay Ahead of Hackers", "url": "https://wpscan.com/blog/website-security-tools/", "published_at": "2024-06-05T13:00:00+00:00" }, { "id": "01a0e497-6405-7289-8173-51387ebe6fae", "title": "The 10 Best Vulnerability Scanners for Effective Web Security", "url": "https://wpscan.com/blog/vulnerability-scanners/", "published_at": "2024-05-16T13:00:00+00:00" }, { "id": "01a0e497-6405-7289-8173-51387ef537c6", "title": "A persistent twist in the current Malware Campaign", "url": "https://wpscan.com/blog/a-persistent-twist-in-the-current-malware-campaign/", "published_at": "2024-05-13T19:12:20+00:00" }, { "id": "01a0e497-6405-7289-8173-51387fe34e2a", "title": "Surge of JavaScript Malware in sites with vulnerable versions of LiteSpeed Cache Plugin", "url": "https://wpscan.com/blog/surge-of-javascript-malware-in-sites-with-vulnerable-versions-of-litespeed-cache-plugin/", "published_at": "2024-05-03T15:01:15+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e8904d590ba3", "title": "New Malware Campaign Targets WP-Automatic Plugin", "url": "https://wpscan.com/blog/new-malware-campaign-targets-wp-automatic-plugin/", "published_at": "2024-04-24T19:27:44+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e8904d6a501e", "title": "How to Secure Your Website: Top Tips From Enterprise Security Experts", "url": "https://wpscan.com/blog/how-to-secure-a-website/", "published_at": "2024-04-24T13:00:00+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e8904dbfee40", "title": "Unauthenticated Stored XSS Fixed in WordPress Core", "url": "https://wpscan.com/blog/unauthenticated-stored-xss-fixed-in-wordpress-core/", "published_at": "2024-04-15T17:04:20+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e8904e1c5315", "title": "What is an SQL Injection (SQLi)? How to Prevent SQLi Attacks", "url": "https://wpscan.com/blog/sql-injection/", "published_at": "2024-04-10T13:00:00+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e8904f1b9db3", "title": "The 16 Most Common Web Application Vulnerabilities Explained", "url": "https://wpscan.com/blog/web-application-vulnerabilities/", "published_at": "2024-03-13T13:00:00+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e890500889b5", "title": "20 Website Security Services and How to Choose the Right One", "url": "https://wpscan.com/blog/website-security-services/", "published_at": "2024-02-21T14:00:00+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e89050b8e53f", "title": "Penetration Testing vs Vulnerability Scanning: Key Differences Explained", "url": "https://wpscan.com/blog/penetration-testing-vs-vulnerability-scanning/", "published_at": "2024-01-10T15:22:37+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e89051a2b855", "title": "File Inclusion Vulnerability Fixed In Essential Blocks 4.4.3", "url": "https://wpscan.com/blog/file-inclusion-vulnerability-fixed-in-essential-blocks-4-4-3/", "published_at": "2023-12-21T14:25:04+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e89051a60157", "title": "Hardening WordPress: 26 Steps to Harden WP Like an Expert", "url": "https://wpscan.com/blog/hardening-wordpress/", "published_at": "2023-12-13T14:00:00+00:00" }, { "id": "01a0e4a7-a477-7247-be75-e89051fc2d8e", "title": "Stored XSS Fixed In WP Go Maps 9.0.28", "url": "https://wpscan.com/blog/stored-xss-fixed-in-wp-go-maps-9-0-28/", "published_at": "2023-12-12T18:21:46+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d5f17f78", "title": "Stored XSS Fixed In Popup Builder 4.2.3", "url": "https://wpscan.com/blog/stored-xss-fixed-in-popup-builder-4-2-3/", "published_at": "2023-12-11T18:37:15+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d6dee084", "title": "Penetration Testing: A 20-Step Guide by Top Security Experts", "url": "https://wpscan.com/blog/penetration-testing/", "published_at": "2023-11-15T14:00:00+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d78c20cc", "title": "Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2", "url": "https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/", "published_at": "2023-11-13T17:31:06+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d856afd8", "title": "26-Step WordPress Security Guide for Enterprise-Level Protection", "url": "https://wpscan.com/blog/wordpress-security/", "published_at": "2023-10-25T13:00:00+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d907a602", "title": "Unauthenticated File Upload Vulnerability Addressed in Royal Elementor Addons and Templates 1.3.79", "url": "https://wpscan.com/blog/unauthenticated-file-upload-vulnerability-addressed-in-royal-elementor-addons-and-templates-1-3-79/", "published_at": "2023-10-13T18:52:11+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0d9fc795d", "title": "Finding A RCE Gadget Chain In WordPress Core", "url": "https://wpscan.com/blog/finding-a-rce-gadget-chain-in-wordpress-core/", "published_at": "2023-10-13T17:33:43+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0dac320be", "title": "Email Leak Oracle Vulnerability Addressed in WordPress 6.3.2", "url": "https://wpscan.com/blog/email-leak-oracle-vulnerability-addressed-in-wordpress-6-3-2/", "published_at": "2023-10-13T17:26:50+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0dba4bffd", "title": "How to Perform a Website Security Audit [Checklist + Tools]", "url": "https://wpscan.com/blog/website-security-audit/", "published_at": "2023-08-23T21:43:19+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0dbd5dc03", "title": "20 Website Vulnerabilities & Security Threats You Need to Know", "url": "https://wpscan.com/blog/website-vulnerabilities-and-security-threats/", "published_at": "2023-08-09T21:48:20+00:00" }, { "id": "01a0e4b7-f306-701a-ba2c-94e0dc74683e", "title": "Hacking Campaign Actively Exploiting Ultimate Member Plugin", "url": "https://wpscan.com/blog/hacking-campaign-actively-exploiting-ultimate-member-plugin/", "published_at": "2023-08-03T11:27:00+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d5187d3c8b4e", "title": "The Ultimate WordPress Security Checklist", "url": "https://wpscan.com/blog/wordpress-security-checklist/", "published_at": "2023-07-12T21:57:00+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d5187df4b71e", "title": "Arbitrary Plugin Installation Vulnerability In Formidable Forms", "url": "https://wpscan.com/blog/arbitrary-plugin-installation-vulnerability-in-formidable-forms/", "published_at": "2023-06-05T17:53:30+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d5187e467c5b", "title": "WordPress VIP Integrates WPScan to Flag Potential Vulnerabilities with Major Sites Before They Go to Production", "url": "https://wpscan.com/blog/wordpress-vip-integrates-wpscan-to-flag-potential-vulnerabilities-with-major-sites-before-they-go-to-production/", "published_at": "2023-04-19T19:05:58+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d5187f0e7771", "title": "Uncovering a PHAR Deserialization Vulnerability in WP Meta SEO and Escalating to RCE", "url": "https://wpscan.com/blog/uncovering-a-phar-deserialization-vulnerability-in-wp-meta-seo-and-escalating-to-rce/", "published_at": "2023-04-10T12:00:00+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d5187f565477", "title": "What is a brute force attack?", "url": "https://wpscan.com/blog/what-is-a-brute-force-attack/", "published_at": "2023-03-07T23:56:18+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d518802326af", "title": "SQL Injection Found And Fixed In Slimstat Analytics and Paid Memberships Pro", "url": "https://wpscan.com/blog/sql-injection-found-and-fixed-in-slimstat-analytics-and-paid-memberships-pro/", "published_at": "2023-03-01T19:08:18+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d51880d9051c", "title": "WordPress Black Box Testing Basics", "url": "https://wpscan.com/blog/wordpress-black-box-testing-basics/", "published_at": "2023-01-27T20:57:04+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d51881887b62", "title": "Fake plugin affecting WordPress sites", "url": "https://wpscan.com/blog/fake-plugin-affecting-wordpress-sites/", "published_at": "2023-01-25T17:08:53+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d51881a8d75a", "title": "WordPress VIP Adds WPScan to Codebase Manager", "url": "https://wpscan.com/blog/wordpress-vip-adds-wpscan-to-codebase-manager/", "published_at": "2023-01-17T18:10:11+00:00" }, { "id": "01a0e4c7-147a-7297-ba17-d51882000e61", "title": "Protecting your WordPress website against SQL injection attacks", "url": "https://wpscan.com/blog/protecting-your-wordpress-website-against-sql-injection-attacks/", "published_at": "2023-01-06T21:03:30+00:00" }, { "id": "01a0e4da-21a2-720a-b0a5-48a9ae65be7a", "title": "What to do about a blind SSRF vulnerability affecting WordPress Core", "url": "https://wpscan.com/blog/what-to-do-about-a-blind-ssrf-vulnerability-affecting-wordpress-core/", "published_at": "2022-12-22T19:35:52+00:00" }, { "id": "01a0e4da-21a2-720a-b0a5-48a9aeade1bf", "title": "The Complete Checklist for WordPress Security Leaders", "url": "https://wpscan.com/blog/the-complete-checklist-for-wordpress-security-leaders/", "published_at": "2022-12-21T16:09:32+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c3ba4752", "title": "Vulnerabilities Discovered in the 3DPrint Premium Plugin", "url": "https://wpscan.com/blog/vulnerabilities-discovered-in-the-3dprint-premium-plugin/", "published_at": "2022-12-13T20:36:23+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c3efa443", "title": "A Note On CSV Injection Reports", "url": "https://wpscan.com/blog/a-note-on-csv-injection-reports/", "published_at": "2022-11-09T12:56:36+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c4d2b5b6", "title": "A Note On 2FA Plugin Vulnerabilities", "url": "https://wpscan.com/blog/a-note-on-2fa-plugin-vulnerabilities/", "published_at": "2022-09-30T13:09:41+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c578a6ff", "title": "Writing Good Submissions", "url": "https://wpscan.com/blog/writing-good-submissions/", "published_at": "2022-09-30T13:09:14+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c654cdab", "title": "WPScan Acquired by Automattic", "url": "https://wpscan.com/blog/wpscan-joins-automattic/", "published_at": "2021-11-04T12:38:19+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c6d6dbdf", "title": "What is Attack Surface Mapping?", "url": "https://wpscan.com/blog/bit-discovery-use-wpscan-to-help-with-attack-surface-mapping/", "published_at": "2021-08-25T09:41:38+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c700c567", "title": "2021 Mid-Year WordPress Security Report: A Collaboration Between Wordfence and WPScan", "url": "https://wpscan.com/blog/2021-mid-year-wordpress-security-report/", "published_at": "2021-08-11T15:37:32+00:00" }, { "id": "01a0e4da-21a3-7178-9fdf-38e4c706e3fd", "title": "Why Submit Vulnerabilities to WPScan", "url": "https://wpscan.com/blog/why-submit-vulnerabilities-to-wpscan/", "published_at": "2021-08-10T12:47:04+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f344d4b6a9", "title": "WordPress Vulnerability Statistics for July 2021", "url": "https://wpscan.com/blog/wordpress-vulnerability-statistics-for-july-2021/", "published_at": "2021-08-02T08:37:21+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f3454911e7", "title": "Two Vulnerabilities Fixed in Super Progressive Web Apps WordPress Plugin", "url": "https://wpscan.com/blog/two-vulnerabilities-fixed-in-super-progressive-web-apps-wordpress-plugin/", "published_at": "2021-07-21T08:35:09+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f3461c838e", "title": "Why Admin XSS Is a Valid Security Issue", "url": "https://wpscan.com/blog/why-admin-xss-is-a-valid-security-issue/", "published_at": "2021-07-20T09:56:51+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f346d17e61", "title": "Coding Mistake Leads to CSRF Bypass in 200,000+ WordPress Websites", "url": "https://wpscan.com/blog/coding-mistake-leads-to-csrf-bypass-in-200000-wordpress-websites/", "published_at": "2021-07-19T10:37:35+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f3474736a4", "title": "Critical WooCommerce Vulnerabilities", "url": "https://wpscan.com/blog/critical-woocommerce-vulnerabilities/", "published_at": "2021-07-16T10:12:21+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f347ba23b6", "title": "Interview with a WordPress Hacker: m0ze", "url": "https://wpscan.com/blog/interview-with-a-wordpress-hacker-m0ze/", "published_at": "2021-06-30T18:23:24+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f3488646f7", "title": "WordPress 5.7.1 Security and Maintenance Release", "url": "https://wpscan.com/blog/wordpress-5-7-1-security-and-maintenance-release/", "published_at": "2021-06-29T10:28:11+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f349020de2", "title": "Zerodium Offers $300,000 for WordPress Exploits", "url": "https://wpscan.com/blog/zerodium-offers-300000-for-wordpress-exploits/", "published_at": "2021-06-29T10:27:36+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f3494b94a1", "title": "Covid Test Centres Leak Personal Information via WordPress API", "url": "https://wpscan.com/blog/covid-test-centres-leak-personal-information-via-wordpress-api/", "published_at": "2021-06-29T10:27:02+00:00" }, { "id": "01a0e4eb-5764-73c0-941c-b6f34a415e93", "title": "WooCommerce Customers Manager WordPress Plugin – Multiple Security Vulnerabilities", "url": "https://wpscan.com/blog/woocommerce-customers-manager-wordpress-plugin-multiple-security-vulnerabilities/", "published_at": "2021-06-29T10:26:26+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e6c2ed5b", "title": "WordPress Configuration File Backups", "url": "https://wpscan.com/blog/wordpress-configuration-file-backups/", "published_at": "2021-06-29T10:25:52+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e6eae58a", "title": "WordPress Version Control Files", "url": "https://wpscan.com/blog/wordpress-version-control-files/", "published_at": "2021-06-29T10:25:15+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e7c09f92", "title": "WordPress SSL/TLS HTTPS Encryption", "url": "https://wpscan.com/blog/wordpress-ssl-tls-https-encryption/", "published_at": "2021-06-29T10:24:42+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e859e111", "title": "WordPress Secret Keys", "url": "https://wpscan.com/blog/wordpress-secret-keys/", "published_at": "2021-06-29T10:24:11+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e87f255f", "title": "WordPress Debug Log Files", "url": "https://wpscan.com/blog/wordpress-debug-log-files/", "published_at": "2021-06-29T10:23:39+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e8caead6", "title": "Vulnerability in Zebra_Form PHP Library Affects Multiple WordPress Plugins", "url": "https://wpscan.com/blog/vulnerability-in-zebra_form-php-library-affects-multiple-wordpress-plugins/", "published_at": "2021-06-29T10:23:06+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16e9b6705f", "title": "Is WordPress XMLRPC a security problem?", "url": "https://wpscan.com/blog/is-wordpress-xmlrpc-a-security-problem/", "published_at": "2021-06-29T10:21:51+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16ea0a53e4", "title": "WPScan authorized as a CVE Numbering Authority by the CVE Program", "url": "https://wpscan.com/blog/wpscan-authorized-as-a-cve-numbering-authority-by-the-cve-program/", "published_at": "2021-06-29T10:19:45+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16ea47a063", "title": "WordPress Security Roundup November 2020", "url": "https://wpscan.com/blog/wordpress-security-roundup-november-2020/", "published_at": "2021-06-29T10:18:09+00:00" }, { "id": "01a0e4ff-c09c-7127-8cfc-6d16eb20d8ef", "title": "November 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/november-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:17:29+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09d2d5fa5", "title": "WordPress Security Roundup for October 2020", "url": "https://wpscan.com/blog/wordpress-security-roundup-for-october-2020/", "published_at": "2021-06-29T10:16:49+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09da62b18", "title": "WordPress 5.5.2 Security Release", "url": "https://wpscan.com/blog/wordpress-5-5-2-security-release/", "published_at": "2021-06-29T10:16:01+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09db74649", "title": "We have a new website!", "url": "https://wpscan.com/blog/we-have-a-new-website/", "published_at": "2021-06-29T10:15:28+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09e2b0e71", "title": "September 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/september-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:14:52+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09e6502ee", "title": "On December 1st 2020 we will be closing WPScan.io (the SaaS)", "url": "https://wpscan.com/blog/on-december-1st-2020-we-will-be-closing-wpscan-io-the-saas/", "published_at": "2021-06-29T10:13:31+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09f1888de", "title": "August 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/august-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:11:20+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b09f70fa7d", "title": "July 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/july-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:10:27+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b0a0362663", "title": "Installing WPScan", "url": "https://wpscan.com/blog/wpscan-user-documentation/", "published_at": "2021-06-29T10:09:40+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b0a05c42f1", "title": "WordPress Security Scan", "url": "https://wpscan.com/blog/wordpress-security-scan/", "published_at": "2021-06-29T10:05:58+00:00" }, { "id": "01a0e515-94ed-700f-8143-42b0a0bb07af", "title": "June 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/june-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:02:50+00:00" }, { "id": "01a0e523-993e-709a-be60-f181af00ba3c", "title": "WordPress 5.4.2 Security and Maintenance Release", "url": "https://wpscan.com/blog/wordpress-5-4-2-security-and-maintenance-release/", "published_at": "2021-06-29T10:02:09+00:00" }, { "id": "01a0e523-993e-709a-be60-f181afa71c62", "title": "May 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/may-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:01:33+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b0a644fe", "title": "April 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/april-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T10:00:45+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b18019ae", "title": "CVSS Risk Scores and More", "url": "https://wpscan.com/blog/cvss-risk-scores-and-more/", "published_at": "2021-06-29T10:00:12+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b23e3b39", "title": "New WPScan Features", "url": "https://wpscan.com/blog/new-wpvulndb-features/", "published_at": "2021-06-29T09:59:42+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b2506ac4", "title": "March 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/march-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T09:59:09+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b2597ca4", "title": "Slack Incoming Webhook Notifications", "url": "https://wpscan.com/blog/slack-incoming-webhook-notifications/", "published_at": "2021-06-29T09:58:34+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b328c960", "title": "Ultimate Membership Pro Premium WordPress Plugin Recent Vulnerabilities Breakdown", "url": "https://wpscan.com/blog/ultimate-membership-pro-premium-wordpress-plugin-recent-vulnerabilities-breakdown/", "published_at": "2021-06-29T09:58:05+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b34109d1", "title": "February 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/february-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T09:57:24+00:00" }, { "id": "01a0e523-993e-709a-be60-f181b383665c", "title": "New Description and PoC fields in API", "url": "https://wpscan.com/blog/new-description-and-poc-fields-in-api/", "published_at": "2021-06-29T09:56:45+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03682299aa6", "title": "Paid Vulnerability Email Alerts", "url": "https://wpscan.com/blog/paid-vulnerability-email-alerts/", "published_at": "2021-06-29T09:56:12+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03682f33dcd", "title": "January 2020 Monthly Vulnerability Roundup", "url": "https://wpscan.com/blog/january-2020-monthly-vulnerability-roundup/", "published_at": "2021-06-29T09:55:38+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03683f257bf", "title": "Dradis WPScan Integration", "url": "https://wpscan.com/blog/dradis-wpscan-integration/", "published_at": "2021-06-29T09:54:36+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03684e9c52b", "title": "New WPScan Vulnerability Webhooks", "url": "https://wpscan.com/blog/new-wpvulndb-webhooks/", "published_at": "2021-06-29T09:54:00+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03685052fe3", "title": "Old WPScan Deprecation on February 1st", "url": "https://wpscan.com/blog/old-wpscan-deprecation-on-february-1st/", "published_at": "2021-06-29T09:53:12+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f036851d7658", "title": "Our new sponsor: Automattic", "url": "https://wpscan.com/blog/our-new-sponsor-automattic/", "published_at": "2021-06-29T09:52:21+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f0368563b592", "title": "WPScan WordPress Security Commandments Poster", "url": "https://wpscan.com/blog/wpscan-wordpress-security-commandments-poster/", "published_at": "2021-06-29T09:51:44+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f036857a8cf5", "title": "WPScan Plugin Security Commandments Poster", "url": "https://wpscan.com/blog/wpscan-plugin-security-commandments-poster/", "published_at": "2021-06-29T09:50:57+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f0368614b0e2", "title": "WPScan CLI Cheat Sheet Poster", "url": "https://wpscan.com/blog/wpscan-cli-cheat-sheet-poster/", "published_at": "2021-06-29T09:50:18+00:00" }, { "id": "01a0e539-d4b1-7190-b5fa-f03686a61427", "title": "WordPress 5.2.4 Security Release Breakdown", "url": "https://wpscan.com/blog/wordpress-5-2-4-security-release-breakdown/", "published_at": "2021-06-29T09:49:38+00:00" } ] posts Claim your blog

Back to wpscan.com

Blog · corpus.blog/blogs/wpscan.com/posts

wpscan.com

wpscan.com

2026

WPScan 4.0.0: We’re Back original ↗

20 May 2026

2024

Unauthorized Plugin Installation/Activation in Hunk Companion original ↗

10 Dec 2024

Identifying Traffic from Shell Finder Bots original ↗

1 Nov 2024

Unpatched Vulnerability in TI WooCommerce Wishlist Plugin original ↗

9 Sept 2024

Unauthenticated Privilege Escalation in Profile-Builder plugin original ↗

15 Jul 2024

Object Injection vulnerability fixed in SEOPress 7.9 original ↗

24 Jun 2024

10 of the Best Website Security Tools to Stay Ahead of Hackers original ↗

5 Jun 2024

The 10 Best Vulnerability Scanners for Effective Web Security original ↗

16 May 2024

A persistent twist in the current Malware Campaign original ↗

13 May 2024

Surge of JavaScript Malware in sites with vulnerable versions of LiteSpeed Cache Plugin original ↗

3 May 2024

New Malware Campaign Targets WP-Automatic Plugin original ↗

24 Apr 2024

How to Secure Your Website: Top Tips From Enterprise Security Experts original ↗

24 Apr 2024

Unauthenticated Stored XSS Fixed in WordPress Core original ↗

15 Apr 2024

What is an SQL Injection (SQLi)? How to Prevent SQLi Attacks original ↗

10 Apr 2024

The 16 Most Common Web Application Vulnerabilities Explained original ↗

13 Mar 2024

20 Website Security Services and How to Choose the Right One original ↗

21 Feb 2024

Penetration Testing vs Vulnerability Scanning: Key Differences Explained original ↗

10 Jan 2024

2023

File Inclusion Vulnerability Fixed In Essential Blocks 4.4.3 original ↗

21 Dec 2023

Hardening WordPress: 26 Steps to Harden WP Like an Expert original ↗

13 Dec 2023

Stored XSS Fixed In WP Go Maps 9.0.28 original ↗

12 Dec 2023

Stored XSS Fixed In Popup Builder 4.2.3 original ↗

11 Dec 2023

Penetration Testing: A 20-Step Guide by Top Security Experts original ↗

15 Nov 2023

Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 original ↗

13 Nov 2023

26-Step WordPress Security Guide for Enterprise-Level Protection original ↗

25 Oct 2023

Unauthenticated File Upload Vulnerability Addressed in Royal Elementor Addons and Templates 1.3.79 original ↗

13 Oct 2023

Finding A RCE Gadget Chain In WordPress Core original ↗

13 Oct 2023

Email Leak Oracle Vulnerability Addressed in WordPress 6.3.2 original ↗

13 Oct 2023

How to Perform a Website Security Audit [Checklist + Tools]original ↗

23 Aug 2023

20 Website Vulnerabilities & Security Threats You Need to Know original ↗

9 Aug 2023

Hacking Campaign Actively Exploiting Ultimate Member Plugin original ↗

3 Aug 2023

The Ultimate WordPress Security Checklist original ↗

12 Jul 2023

Arbitrary Plugin Installation Vulnerability In Formidable Forms original ↗

5 Jun 2023

WordPress VIP Integrates WPScan to Flag Potential Vulnerabilities with Major Sites Before They Go to Production original ↗

19 Apr 2023

Uncovering a PHAR Deserialization Vulnerability in WP Meta SEO and Escalating to RCE original ↗

10 Apr 2023

What is a brute force attack?original ↗

7 Mar 2023

SQL Injection Found And Fixed In Slimstat Analytics and Paid Memberships Pro original ↗

1 Mar 2023

WordPress Black Box Testing Basics original ↗

27 Jan 2023

Fake plugin affecting WordPress sites original ↗

25 Jan 2023

WordPress VIP Adds WPScan to Codebase Manager original ↗

17 Jan 2023

Protecting your WordPress website against SQL injection attacks original ↗

6 Jan 2023

2022

What to do about a blind SSRF vulnerability affecting WordPress Core original ↗

22 Dec 2022

The Complete Checklist for WordPress Security Leaders original ↗

21 Dec 2022

Vulnerabilities Discovered in the 3DPrint Premium Plugin original ↗

13 Dec 2022

A Note On CSV Injection Reports original ↗

9 Nov 2022

A Note On 2FA Plugin Vulnerabilities original ↗

30 Sept 2022

Writing Good Submissions original ↗

30 Sept 2022

2021

WPScan Acquired by Automattic original ↗

4 Nov 2021

What is Attack Surface Mapping?original ↗

25 Aug 2021

2021 Mid-Year WordPress Security Report: A Collaboration Between Wordfence and WPScan original ↗

11 Aug 2021

Why Submit Vulnerabilities to WPScan original ↗

10 Aug 2021

WordPress Vulnerability Statistics for July 2021 original ↗

2 Aug 2021

Two Vulnerabilities Fixed in Super Progressive Web Apps WordPress Plugin original ↗

21 Jul 2021

Why Admin XSS Is a Valid Security Issue original ↗

20 Jul 2021

Coding Mistake Leads to CSRF Bypass in 200,000+ WordPress Websites original ↗

19 Jul 2021

Critical WooCommerce Vulnerabilities original ↗

16 Jul 2021

Interview with a WordPress Hacker: m0ze original ↗

30 Jun 2021

WordPress 5.7.1 Security and Maintenance Release original ↗

29 Jun 2021

Zerodium Offers $300,000 for WordPress Exploits original ↗

29 Jun 2021

Covid Test Centres Leak Personal Information via WordPress API original ↗

29 Jun 2021

WooCommerce Customers Manager WordPress Plugin – Multiple Security Vulnerabilities original ↗

29 Jun 2021

WordPress Configuration File Backups original ↗

29 Jun 2021

WordPress Version Control Files original ↗

29 Jun 2021

WordPress SSL/TLS HTTPS Encryption original ↗

29 Jun 2021

WordPress Secret Keys original ↗

29 Jun 2021

WordPress Debug Log Files original ↗

29 Jun 2021

Vulnerability in Zebra_Form PHP Library Affects Multiple WordPress Plugins original ↗

29 Jun 2021

Is WordPress XMLRPC a security problem?original ↗

29 Jun 2021

WPScan authorized as a CVE Numbering Authority by the CVE Program original ↗

29 Jun 2021

WordPress Security Roundup November 2020 original ↗

29 Jun 2021

November 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

WordPress Security Roundup for October 2020 original ↗

29 Jun 2021

WordPress 5.5.2 Security Release original ↗

29 Jun 2021

We have a new website!original ↗

29 Jun 2021

September 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

On December 1st 2020 we will be closing WPScan.io (the SaaS)original ↗

29 Jun 2021

August 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

July 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

Installing WPScan original ↗

29 Jun 2021

WordPress Security Scan original ↗

29 Jun 2021

June 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

WordPress 5.4.2 Security and Maintenance Release original ↗

29 Jun 2021

May 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

April 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

CVSS Risk Scores and More original ↗

29 Jun 2021

New WPScan Features original ↗

29 Jun 2021

March 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

Slack Incoming Webhook Notifications original ↗

29 Jun 2021

Ultimate Membership Pro Premium WordPress Plugin Recent Vulnerabilities Breakdown original ↗

29 Jun 2021

February 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

New Description and PoC fields in API original ↗

29 Jun 2021

Paid Vulnerability Email Alerts original ↗

29 Jun 2021

January 2020 Monthly Vulnerability Roundup original ↗

29 Jun 2021

Dradis WPScan Integration original ↗

29 Jun 2021

New WPScan Vulnerability Webhooks original ↗

29 Jun 2021

Old WPScan Deprecation on February 1st original ↗

29 Jun 2021

Our new sponsor: Automattic original ↗

29 Jun 2021

WPScan WordPress Security Commandments Poster original ↗

29 Jun 2021

WPScan Plugin Security Commandments Poster original ↗

29 Jun 2021

WPScan CLI Cheat Sheet Poster original ↗

29 Jun 2021

WordPress 5.2.4 Security Release Breakdown original ↗

29 Jun 2021