Millions of attacks hit WordPress websites - here's how to make sure you stay safe

Person editing a WordPress site.

• Unpatched GutenKit and Hunk Companion plugins exploited in mass WordPress attacks
• Attackers use ‘up’ plugin to gain admin access and deploy malware
• Wordfence blocked 8.7 million attempts in 48 hours; updates remain critical

Three critical-severity vulnerabilities, found in two WordPress plugins and fixed more than a year ago, are now being exploited in mass attacks against websites which still haven’t patched the issues.