Browsing Tag
WordPress
3 posts
WordPress platform, plugin, theme, CMS, publishing, and site-administration coverage.
Automattic Launches Spacefast for AI-Built Apps: What It Does and What’s Still Beta
Spacefast lets ChatGPT, Claude, Cursor and Codex deploy apps through MCP. Here is what works now, how approvals protect live sites, and what remains beta.
CMS Webshell Campaign Puts WordPress Plugins on an Emergency Checklist
Australia's cyber agency says attackers are exploiting known CMS and plugin flaws at scale to plant webshells on public websites. Site owners should treat this as a compromise check, not just a routine update reminder.
Gravity SMTP Exploit Puts WordPress Mail API Keys at Risk
Attackers are actively exploiting CVE-2026-4020 in the Gravity SMTP WordPress plugin, a flaw that can expose mail-service API keys, OAuth tokens, plugin versions, and server details. Site owners should update to Gravity SMTP 2.1.5 or later, check logs, and rotate affected email credentials.