WordPress Vulnerability Disclosures Hit 11,334 in 2025
Patchstack recorded 11,334 new WordPress vulnerabilities in 2025, up 42%. Our own analysis of the CVE record shows 2026 running level, not higher.
Read More
Patchstack recorded 11,334 new WordPress vulnerabilities in 2025, up 42%. Our own analysis of the CVE record shows 2026 running level, not higher.
Read More
WordPress 7.1 changed how hook callbacks are identified. On sites running WP Rocket and Elementor Pro under PHP 8, that is a fatal error — often hidden behind a...
Read More
Elementor Pro 4.2.2, released 19 August 2026, fixes a CVSS 9.0 flaw letting anyone upload PHP files through a Form upload field. What it means for your site.
Read More
WordPress 7.0.4, released 12 August 2026, fixes a remote code execution flaw — the third core security release in four weeks. What it means for your site.
Read MoreWordPress 7.0.2 was released on 17 July 2026, fixing an unauthenticated RCE and a SQL injection in core. What it affects and what to do.
Read More
Updated 15 May 2026 · Written by Andrew The short version: if your site is hosted with WP Care, you don’t need to do anything — we’ve already protected...
Read MoreWordPress 7.0 launched 20 May 2026. Here's what shipped, what didn't, the new PHP requirement, and how we approach updates across client sites.
Read More
If you run a WordPress site, you’ll want to read this one carefully. Over the past fortnight the WordPress security community has uncovered one of the most significant supply...
Read More
The internet is currently experiencing widespread disruption due to a major global network incident affecting Cloudflare, one of the world’s most critical internet infrastructure providers. This is not just...
Read More
At WP Care, we’re dedicated to enhancing the security of our clients’ websites. We’re pleased to announce that we’re rolling out Patchstack integration to a select group of clients...
Read More