Security
21 articles in this category.
Elementor Pro Sites Are Being Hacked: What to Check Right Now
A critical Elementor Pro vulnerability is being actively exploited to hack WordPress sites. Here's what it does, how to check if you've been hit, and what to do.
Millions of WordPress Sites Still Vulnerable: What CVE-2026-19949 Means for You
A backup plugin on over 5 million WordPress sites has a serious SQL injection flaw. Update to version 7.110 now, and check the rest of your plugins while you're at it.
Two WordPress Security Alerts You Can't Ignore: A Full Takeover Bug and 12 Core Fixes
A 9.8-rated WooCommerce Social Login flaw lets attackers log in as your admin, and WordPress core 7.0.3 fixes 12 more vulnerabilities. Here's what to check and update today.
WordPress Malware Removal: A Practical Guide to Cleaning and Protecting Your Hacked Site
If your WordPress site has been hacked or infected with malware, every hour counts. This practical guide walks you through the warning signs, the full removal process, and the hardening steps that stop attackers coming back.
Locked Out of WordPress? How to Add an Admin User via SQL
If you're locked out of WordPress and the lost password feature isn't helping, adding a new admin user directly via SQL is a reliable way back in. Here's exactly how to do it safely.
Kirki Plugin Vulnerability Lets Attackers Reset Admin Passwords on 400,000+ WordPress Sites
If your WordPress site uses the Kirki page builder plugin, you need to update it today. A critical flaw in versions 6.0.0 to 6.0.6 lets anyone reset your admin password without ever logging in.
Everest Forms Pro Has a Critical Vulnerability Being Actively Exploited, Here's What to Do
If your WordPress site uses Everest Forms Pro, you need to act now. Attackers are already exploiting a critical flaw in the plugin that could hand them full control of your site.
Why a WordPress Support Retainer Is Worth It for Growing Businesses
A WordPress support retainer means a dedicated team already knows your site, your goals and your priorities, so work gets done faster, for a fixed monthly cost that's easy to budget for.
Two Security Flaws Found in Avada Builder WordPress Plugin, Update to 3.15.3 Now
Two security vulnerabilities have been found in the Avada Builder WordPress plugin, which has around one million active installations. One can be exploited without any login at all. Here's what you need to know and do right now.
Jetpack vs Wordfence: Which WordPress Security Plugin Should You Choose?
Jetpack and Wordfence both protect WordPress sites, but they work very differently. Here's a plain-English breakdown of their features, usability and pricing to help you decide which one suits your business.