Thousands of WordPress sites running the Kali Forms plugin are exposed to attackers who can execute arbitrary code on web ...

Hackers are exploiting a critical vulnerability in Mirasvit Full Page Cache Warmer to execute code remotely on Magento ...

A critical vulnerability in the Everest Forms Pro plugin for WordPress has been actively exploited to hijack vulnerable ...

Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...

The comments on some Steam Profiles are actually loaded with invisible malware.

A new malware campaign has compromised nearly 2,000 WordPress websites by using Steam Community profile comments to hide ...

CVE-2026-8732 in WP Maps Pro lets unauthenticated attackers create admin accounts on 15,000+ WordPress sites. Wordfence blocked 2,858 attacks in 24 hours.

WordPress 7.0 “Armstrong,” released May 20, 2026, arrived without the real-time collaborative editing feature that had been its stated centerpiece for months — and within two days of launch, a securit ...

Cloudflare created an open-source CMS it calls a "spiritual successor to WordPress" — but WordPress is having none of it. Cloudflare has unveiled EmDash, a new open-source content management system ...

Automattic has added write capabilities to WordPress.com’s MCP integration, giving AI agents like Claude and ChatGPT the ability to create posts, build pages, manage comments, and restructure content, ...

Web hosting platform WordPress.com is embracing AI agents, a decision that could change the look and feel of the web. The company announced Friday that it will now allow AI agents to draft, edit, and ...

WordPress has created three new plugins that make it easy to add OpenAI, Google Gemini, or Anthropic Claude integration for the PHP AI Client SDK. The plugins enable text, image, function calling and ...