WordPress's massive installed base isn't going anywhere, but many developers and AI agents are not opting for the product for new sites. Will they go for Cloudflare instead?

Dozens of WordPress plugins were allegedly hijacked to push malware after they were sold to a new corporate owner.

More than 30 WordPress plugins were shut down after a supply-chain backdoor compromised thousands of sites through the ...

Hackers hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla, and pushed a malicious version ...

Dozens of WordPress plugins were taken offline after a suspected supply-chain attack involving a malicious backdoor added ...

Dozens of WordPress plug-ins have been pulled after a hidden backdoor reportedly exposed thousands of websites to malicious ...

A popular brand of WordPress plugins was recently weaponized to download and spread malicious code. The new, potentially ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.

Dozens of plug-ins for WordPress have been taken offline after a backdoor was discovered that allowed malicious code to be distributed to thousands of ...

A backdoor was discovered in several WordPress plug-ins, leading to their removal from the platform. The malicious code ...

Cloudflare's EmDash tackles WordPress's plugin problem ...