WordPress news for business websites: core releases, plugin and theme security holes, and how to update and maintain your site safely.
Every topic in WordPress.
New WordPress versions and security releases: what changed, whether to update now and what to check on your business website after the update.
Holes in popular plugins and themes, and the safe version to update to.
Backup first, update order, testing and rolling back.
Website maintenance for WordPress: updates, backups, caching, PHP versions and the monthly checks that keep a business site fast and healthy.
Six popular WordPress plugins have holes that need no login, including ACF and CleanTalk. Check your versions and update today.
Duplicator, WPvivid, Form Maker, GiveWP, Redux and about 20 more plugins fixed security holes this week. Three have no fix: remove them.
You can look after a small WordPress site yourself if someone has the time and a routine. Here is what the work involves and when to hand it over.
LiteSpeed Cache 7.9.1 and older could expose WooCommerce cart and checkout data to visitors who are not logged in. Update to 7.9.2 or later.
Update ACF Extended PRO now: Patchstack rates it 10 out of 10 and exploited. WooPayments, Easy Digital Downloads and SureCart also have fixes.
s2Member up to 260927 lets anyone run code on the server. Update to 261001 or newer, and check five more plugins fixed this week.
Contact Form 7 6.2 to 6.2.3 has a file upload hole open to any visitor. Update to 6.2.4 or newer, and check Ninja Forms, MapPress and three more plugins.
13 WordPress plugins fixed security holes, some open to any visitor. Check FormFlow, WP Directory Kit, Relevanssi and payment plugins first.
The Avada theme, WP Project Manager, a PDF invoice plugin and about 30 other WordPress add-ons fixed security holes this week. Check your list and update.
Gravity Forms, AI Engine and about 30 other WordPress plugins fixed security holes this week. Check your plugin list and update.
