WordPress plugin holes: YOOtheme, JupiterX, Payex
Ten WordPress plugins and themes had security holes this week. The worst let outsiders in with no login. Check your list today.
Plugin and theme security
Holes in popular plugins and themes, and the safe version to update to.
All WordPress
17 posts
Every topic in WordPress.
WordPress core updates
1 post
New WordPress versions and security releases: what changed, whether to update now and what to check on your business website after the update.
Latest: WordPress plans AI assistant access for version 7.3
Plugin and theme security
13 posts
Holes in popular plugins and themes, and the safe version to update to.
Latest: WordPress plugin security: ACF, CleanTalk, Optimole and 3 more
Updating safely
No posts yet
Backup first, update order, testing and rolling back.
Speed and maintenance
2 posts
Website maintenance for WordPress: updates, backups, caching, PHP versions and the monthly checks that keep a business site fast and healthy.
Latest: Website maintenance in Malaysia: do it yourself or outsource?
Yoast SEO Premium: update to 27.6.1 to fix a flaw
A flaw in older Yoast SEO Premium lets a logged-in author change your site's server settings file (htaccess). Update Yoast SEO Premium now.
WordPress security round-up: 12 to 18 October 2026
Three plugin problems to check this week: Rank Math PRO malware, Click to Chat and 10Web Booster. Update steps inside.