BuddyPress Vulnerability Puts 100,000 Sites at Risk

BuddyPress Vulnerability Puts 100,000 Sites at Risk

A recently disclosed security vulnerability has been identified in the BuddyPress plugin, a popular WordPress extension installed on more than 100,000 websites. Rated 7.3 out of 10, this high-risk flaw allows unauthenticated attackers to execute arbitrary shortcodes,...
TikTok US Deal Concludes After Regulatory Delays

TikTok US Deal Concludes After Regulatory Delays

The US and China have officially finalised a deal transferring TikTok’s American operations to a consortium led by Oracle and Silver Lake, a White House official confirmed. The agreement establishes a new US-based entity in which ByteDance will retain just under 20%...
Agentic AI and Brand Differentiation Risks

Agentic AI and Brand Differentiation Risks

James LePage, Director of Engineering for AI at Automattic and co-lead of the WordPress AI Team, has outlined a potential shift in how websites may operate in the coming years. According to LePage, the rise of agentic AI could transform sites into interactive data...
NotificationX WooCommerce Risk

NotificationX WooCommerce Risk

A new security advisory has been released warning of a serious vulnerability affecting the NotificationX plugin used on WordPress and WooCommerce websites. The flaw impacts more than 40,000 sites and allows attackers to inject malicious scripts without needing to log...
ACF Extended Plugin Faces WordPress Security Flaw

ACF Extended Plugin Faces WordPress Security Flaw

A serious security flaw has been identified in the Advanced Custom Fields: Extended WordPress plugin, placing up to 100,000 websites at risk of a full site takeover by attackers who do not need to be logged in. The issue, which carries a critical severity score of...
>