WordPress
WordPress – WordPress CMS with a flexible plugin system
WordPress is a free, open-source content management system designed to create and manage websites with themes and plugins.
Official WebsiteCategory
CMS & SSG
First Release
2003
License
GPLv2 or later
Maintained By
Matt Mullenweg and Mike Little
Latest News
New PHP Remote Code Execution Flaw Disclosed With No Patch Available
PHP has disclosed a new remote code execution vulnerability, CVE-2026-115560, advising administrators to disable session upload progress until a fix is released.
WordPress 7.2 Beta 1 Released With New Secrets API and Media Updates
The first beta of WordPress 7.2 is now available for testing, featuring a new Secrets API, improved media processing, and various dashboard performance enhancements ahead of the December 8 release.
UpdraftCentral Vulnerability Leads to Unauthorized Plugin Injections
WordPress administrators are urged to audit installations for the malicious Image Core plugin, which is being injected via a remote-control vulnerability in the UpdraftCentral library.
Rank Math SEO Pro Version 3.0.123 Hit by Supply Chain Malware Attack
Users who downloaded Rank Math SEO Pro version 3.0.123 during a specific window in October 2026 are urged to update to 3.0.124 and scan for malicious backdoors and credential theft.
WordPress 7.1.3 Released With Patches for Seven Security Vulnerabilities
WordPress 7.1.3 addresses several high-risk vulnerabilities, including stored XSS and SQL injection flaws, and users are urged to update their installations immediately.
WordPress Malware Uses Ethereum Blockchain for Stealthy Persistence
Threat actors are deploying persistent WordPress malware that uses must-use plugins and Ethereum smart contracts to bypass security removal attempts.
Ninja Forms Releases Version 3.15.4 to Patch Security Vulnerability
Ninja Forms version 3.15.4 addresses a security vulnerability by improving output escaping within the administrative submission edit screen.
New Click2Shell Vulnerability Allows Remote Code Execution in WordPress
A newly discovered security flaw named Click2Shell enables attackers to execute unauthorized PHP code on WordPress servers via the platform's theme customization feature.
Automattic Dissolves Board of Directors Following Failed CEO Removal
Automattic has dissolved its board of directors and consolidated power under CEO Matt Mullenweg following an unsuccessful effort to remove him from his position.
Difficulty
Moderate due to extensive ecosystem, plugin/theme development, and hosting considerations requiring familiarity with PHP and web servers.