Get all your news in one place.

100's of premium titles.
One app.

Start reading

Get all your news in one place.

100's of premium titles. One news app.

Start reading

The Latest Breaking News from Patchstack

Hackers exploit WordPress plugin security flaw exposing 40,000 websites to complete takeover risk - here's how to stay safe

Critical WordPress plugin flaw exposed some 40,000 users to risk of a complete website takeover.

TechRadar · Jan 16

OttoKit WordPress plugin has a serious security flaw, thousands of users possibly affected

OttoKit plugin bug allows threat actors to create new admin accounts.

TechRadar · May 8, 2025

WooCommerce phishing campaign uses fake patch to lure victims into installing backdoors

Researchers are warning about a large-scale, sophisticated attack targeting WooCommerce users.

TechRadar · Apr 28, 2025

From analysis to the latest developments in health,
read the most diverse news in one place.

This top WordPress plugin could be hiding a worrying security flaw, so be on your guard

Older versions of WP Ghost grant threat actors remote code execution abilities so make sure to update the plugin.

TechRadar · Mar 21, 2025

Thousands of WordPress sites targeted with malicious plugin backdoor attacks

Four separate backdoors deployed on vulnerable websites, allowing for persistent access, remote code execution, and more.

TechRadar · Mar 7, 2025

WordPress users beware - these popular theme plugins have some major security issues

A theme and a complementary plugin allowed attackers to elevate privileges and potentially take over WordPress sites.

TechRadar · Jan 23, 2025

Another top WordPress plugin found carrying critical security flaws

A premium WordPress plugin with 20,000 sales allows threat actors to conduct RCE attacks.

TechRadar · Jan 9, 2025

Read news from The Economist, FT, and more,
with one subscription

Top WordPress plugins found to have some serious security flaws, so make sure you're protected

Almost two dozen flaws were found in two solutions, granting RCE and site takeover.

TechRadar · Dec 24, 2024

LiteSpeed Cache plugin for WordPress has a critical security vulnerability

Vulnerable WordPress plugin allows hackers to take over admin accounts.

TechRadar · Sep 6, 2024

Another top WordPress plugin has a major security flaw — and millions of sites could be affected

LiteSpeed Cache flaw allowed threat actors to install additional plugins, essentially taking over the site.

TechRadar · Aug 22, 2024

This WordPress plugin vulnerability has put millions of websites at risk

A WordPress plugin was found allowing attackers to elevate privileges, but the hole was quickly plugged.

TechRadar · Feb 28, 2024

Hackers are attacking another serious WordPress security flaw - here's how to keep your site safe

A day after a PoC was released, hackers started looking for vulnerable WordPress sites.

TechRadar · May 16, 2023

One of the most popular WordPress plugins has a serious security flaw

An Elementor library, used by a million WordPress websites, allowed attackers to reset anyone's password.

TechRadar · May 12, 2023

This WordPress plugin security flaw could put millions of websites at risk - find out if you are affected

WordPress plugin called Advanced Custom Fields was found to be vulnerable to cross-site scripting attacks.

TechRadar · May 9, 2023

Get all your
news in one place.

100's of premium titles.
One news app.

Coverage From

TechRadar

Organisations

From analysis to the latest developments in health,
read the most diverse news in one place.

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.