Automattic reportedly has new board members, advisers, and counsel after the old board failed to oust CEO Matt Mullenweg.

WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable ...

"If you're thinking about SEO, isn't WordPress better?"When consulting on websites, conversations sometimes start from this ...

WordPress.com is offering eligible students a free Student plan for 12 months, giving them advanced web-building tools as it ...

WordPress 7.1.1 fixes Click2Shell, which can force theme installs from crafted links and was chained with a theme flaw for code execution.

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.

Mitigations and a patch are already available but given the severity of the WordPress flaw, immediate patching is recommended.

When you set out to build a website, the names Webflow, Figma, WordPress, and Framer often come up as candidates."Which is ...

CVE-2026-87902: Hackers deployed PHP webshells on WordPress servers within 48 hours of the September 22 security patch, with ...

WordPress flaw that enabled a path to Remote Code Execution (RCE) was patched all the way back to version 4.8, but the real-world attacks have only increased.

Hackers are breaking into websites that run vulnerable versions of the popular blogging software WordPress, according to several cybersecurity firms. One estimate puts the number of vulnerable ...

Attackers probed a WordPress flaw hours after the patch. It needs a 'page-' theme folder and pearcmd.php to work, security ...