Browsing Category
WordPress
4 posts
WordPress platform coverage, including plugins, themes, CMS security, site administration, publishing tools, and practical guidance for website owners and developers.
Automattic Launches Spacefast for AI-Built Apps: What It Does and What’s Still Beta
Spacefast lets ChatGPT, Claude, Cursor and Codex deploy apps through MCP. Here is what works now, how approvals protect live sites, and what remains beta.
PHP2Shell Is Patched, but a Third PHP RCE Edge Case Remains
PHP’s emergency updates fix the two critical PHP2Shell flaws, but CVE-2026-115560 still needs a temporary session upload setting change. Here is how to verify every web runtime.
CMS Webshell Campaign Puts WordPress Plugins on an Emergency Checklist
Australia's cyber agency says attackers are exploiting known CMS and plugin flaws at scale to plant webshells on public websites. Site owners should treat this as a compromise check, not just a routine update reminder.
Gravity SMTP Exploit Puts WordPress Mail API Keys at Risk
Attackers are actively exploiting CVE-2026-4020 in the Gravity SMTP WordPress plugin, a flaw that can expose mail-service API keys, OAuth tokens, plugin versions, and server details. Site owners should update to Gravity SMTP 2.1.5 or later, check logs, and rotate affected email credentials.