WordPress plugins

September 24, 2026

How to tell if a plugin CVE actually affects YOUR site - version + path check

You see a scary headline: “Critical vulnerability in Popular Plugin X.” Your stomach drops a little. Maybe you use that plugin. Maybe...Read More...

September 11, 2026

WordPress now checks plugin updates before they reach your site

A plugin update appears in your WordPress dashboard a little later than expected. Usually, delay sounds bad. This time it may mean...Read More...

September 2, 2026

The WordPress attack that waits for you to restore a backup

Imagine an attacker leaves two odd little packages on your WordPress site today. Nothing dramatic happens. The shop keeps taking orders, the...Read More...

August 27, 2026

The “install Wordfence and forget it” trap

A lot of small business owners do this. They install a security plugin, see a few green checkmarks, maybe get an email...Read More...

August 24, 2026

Elementor Pro file-upload flaw can hand attackers your server - update to 4.2.2

Last week we wrote about a critical upload flaw in Forminator Forms. Now another WordPress form builder has landed in the same...Read More...

August 19, 2026

Forminator’s critical file-upload flaw: what 600,000 WordPress sites need to check

Forminator Forms is installed on more than 600,000 WordPress sites. A critical security flaw has just been disclosed, and the scary version...Read More...

July 23, 2026

WordPress security on a budget: what’s actually worth paying for

If you run a small business website, you’ve probably seen the same advice over and over. Buy this premium plugin. Add that...Read More...

May 9, 2026

How to Uninstall a WordPress Plugin Completely (Tables, Options and Files)

Deleting a WordPress plugin removes its folder, but it may leave database entries, uploaded files and scheduled jobs behind. Here's how to check and clean up without breaking…