WordPress Security – Security Blog https://blog.siteguarding.com Sat, 31 Oct 2026 09:55:23 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg WordPress Security – Security Blog https://blog.siteguarding.com 32 32 WordPress Core RCE Update: Attackers Lie in Wait on the Upgrade Window https://www.siteguarding.com/security-blog/wordpress-core-rce-7-1-4-2/ Sat, 31 Oct 2026 09:55:23 +0000 https://www.siteguarding.com/security-blog/wordpress-core-rce-7-1-4-2/ WordPress 7.1.4, released October 28, 2026, is a WordPress core RCE update. It closes a flaw that lets someone with no login run code on a site while a full core upgrade is unpacking. Within a day, Wordfence had blocked 62,969 attempts to hit that window, so how you apply the patch matters almost as much as applying it. Key takeaways Every WordPress site running core versions 4.7 through 7.1.3...

Source

]]> WordPress Core RCE Update: Attackers Lie in Wait on the Upgrade Window https://www.siteguarding.com/security-blog/wordpress-core-rce-7-1-4/ Sat, 31 Oct 2026 09:49:58 +0000 https://www.siteguarding.com/security-blog/wordpress-core-rce-7-1-4/ WordPress 7.1.4, released October 28, 2026, is a WordPress core RCE update. It closes a flaw that lets someone with no login run code on a site while a full core upgrade is unpacking. Within a day, Wordfence had blocked 62,969 attempts to hit that window, so how you apply the patch matters almost as much as applying it. Key takeaways Every WordPress site running core versions 4.7 through 7.1.3...

Source

]]> PHP2Shell Kernel Patch: Fragnesia Turns PHP Access Into Root https://www.siteguarding.com/security-blog/php2shell-fragnesia-cms-not-enough/ Fri, 30 Oct 2026 08:05:43 +0000 https://www.siteguarding.com/security-blog/php2shell-fragnesia-cms-not-enough/ Attackers are chaining the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619) with Fragnesia, a Linux kernel bug tracked as CVE-2026-46300, to go from one unauthenticated web request to root. Plan the PHP2Shell kernel patch together with the PHP update: a WordPress update closes neither hole, and a routine reboot can erase the evidence. Key takeaways A fully patched WordPress site can still be...

Source

]]> WordPress Update Race Condition: Confirm You’re on 7.1.4 https://www.siteguarding.com/security-blog/wordpress-update-race-condition-714-2/ Fri, 30 Oct 2026 07:36:24 +0000 https://www.siteguarding.com/security-blog/wordpress-update-race-condition-714-2/ WordPress 7.1.4, released October 28, 2026, fixes a WordPress update race condition that lets an unauthenticated attacker run code on a site while a core upgrade is in progress, along with 21 other security fixes. Scanners began probing for that brief window nine minutes after Wordfence shipped a blocking rule, so check that your site actually installed the patched build. Key takeaways The flaw...

Source

]]> WordPress Update Race Condition: Confirm You’re on 7.1.4 https://www.siteguarding.com/security-blog/wordpress-update-race-condition-714/ Fri, 30 Oct 2026 07:25:56 +0000 https://www.siteguarding.com/security-blog/wordpress-update-race-condition-714/ WordPress 7.1.4, released October 28, 2026, fixes a WordPress update race condition that lets an unauthenticated attacker run code on a site while a core upgrade is in progress, along with 21 other security fixes. Scanners began probing for that brief window nine minutes after Wordfence shipped a blocking rule, so check that your site actually installed the patched build. Key takeaways The flaw...

Source

]]> PHP2Shell on Shared Hosting: Check Your Host, Then Rotate Secrets https://www.siteguarding.com/security-blog/php2shell-shared-hosting-secrets/ Wed, 28 Oct 2026 16:54:49 +0000 https://www.siteguarding.com/security-blog/php2shell-shared-hosting-secrets/ PHP2Shell is a pair of remote code execution flaws in the PHP interpreter, so on shared hosting a WordPress or Joomla update leaves you exactly as exposed as before. If attackers reached your server before your host patched, the passwords and keys that server could read are the loss that matters. Key takeaways No. PHP2Shell is a flaw in PHP itself: the interpreter that runs WordPress...

Source

]]> Critical WordPress Plugin Vulnerability: Sneeit Framework Under Active Exploitation https://www.siteguarding.com/security-blog/critical-wordpress-plugin-vulnerability-sneeit-framework-under-active-exploitation/ Thu, 04 Dec 2025 09:37:16 +0000 https://blog.siteguarding.com/?p=1182 Read More]]> A critical remote code execution vulnerability (CVE-2025-6389) affecting the Sneeit Framework WordPress plugin is being actively exploited by threat actors worldwide. With a maximum CVSS score of 9.8, this unauthenticated RCE flaw allows attackers to execute arbitrary PHP code on vulnerable WordPress installations, leading to complete site compromise. Over 131,000 exploitation attempts have been...

Source

]]> Critical Elementor Plugin Vulnerability Enables Complete WordPress Takeover https://www.siteguarding.com/security-blog/critical-elementor-plugin-vulnerability-enables-complete-wordpress-takeover/ Wed, 03 Dec 2025 14:31:06 +0000 https://blog.siteguarding.com/?p=1174 Read More]]> ACTIVE EXPLOITATION ALERT: A critical vulnerability in the King Addons for Elementor WordPress plugin is being actively exploited in the wild. Over 48,400+ attack attempts have been blocked since disclosure. Immediate action required for all installations. Security researchers have uncovered a devastating vulnerability in the King Addons for Elementor WordPress plugin that allows completely...

Source

]]> Critical W3 Total Cache Vulnerability Exposes Over 1 Million WordPress Sites to Remote Code Execution Attacks https://www.siteguarding.com/security-blog/critical-w3-total-cache-vulnerability-exposes-over-1-million-wordpress-sites-to-remote-code-execution-attacks/ Mon, 24 Nov 2025 17:09:55 +0000 https://blog.siteguarding.com/?p=1160 Read More]]> WordPress administrators worldwide face an urgent security crisis following the public release of a proof-of-concept exploit for CVE-2025-9501, a critical command injection vulnerability affecting W3 Total Cache—one of the most widely deployed WordPress caching plugins with over one million active installations. This unauthenticated remote code execution vulnerability enables attackers to execute...

Source

]]> Critical W3 Total Cache Plugin Vulnerability CVE-2025-9501: Unauthenticated Command Injection Threatens Over 1 Million WordPress Websites https://www.siteguarding.com/security-blog/critical-w3-total-cache-plugin-vulnerability-cve-2025-9501-unauthenticated-command-injection-threatens-over-1-million-wordpress-websites/ Fri, 21 Nov 2025 10:18:35 +0000 https://blog.siteguarding.com/?p=1135 Read More]]> A critical-severity security vulnerability has been discovered in W3 Total Cache (W3TC), one of WordPress’s most widely deployed performance optimization plugins with over 1 million active installations. The vulnerability, tracked as CVE-2025-9501 with a severity score of 9.0/10 (critical), affects all versions of the plugin before 2.8.13. The vulnerability allows unauthenticated attackers to...

Source

]]>