WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.

The WordPress developers have closed a malicious code security vulnerability known as XSS2Shell. In a detailed blog post, a security researcher from pwn.ai explains details about the XSS2Shell ...

Matt Mullenweg, the co-founder of the popular open source web publishing software WordPress, has said the community will be pulling away from using Facebook’s React JavaScript library over concerns ...

Spun out of a roundtable on sustaining a growth of female technologists, Baltimore’s first Women/InTech conference brought out some 50 women for an entry point into the technology community during ...

Automattic, the company behind WordPress.com, WooCommerce, Longreads, Simplenote and soon Tumblr, is now worth $3 billion. But its founder and CEO Matt Mullenweg has a bigger goal. He wants to make ...

WordPress 7.1, scheduled for release on August 19, is scheduled to ship with a change that improves accessibility but will cause a breaking change to the admin page for a small number of users. While ...

HTTP Archive’s latest Core Web Vitals Technology Report ranks seven content management platforms and offers the surprising insight that page weight and PageSpeed Insights Lighthouse scores do not ...