Blog
Product updates, WordPress advice, and stories from behind the shield.
WordPress 7.1.3 brings seven security fixes. Most depend on who can log in to your site, so the update works best alongside a quick review of user roles and stored Imgur embeds.
Read articleBricksforge 3.1.8.9 and earlier let attackers plant PHP through form uploads without logging in. Find out whether the plugin is installed, update it and check for files left behin…
Read articleBugShield scanned 100,000 WordPress URLs and found 4,697 that appeared to run a vulnerable Gravity Forms version. Many were still on the older 2.x branch.
Read articleA critical WordPress page-template vulnerability is already being probed. Learn which sites meet the known conditions, how to update, and what to check.
Read articleWe removed the malicious files, but they returned from a payload hidden in the database. Here is how the persistence worked and why cleanup order mattered.
Read articleGravity Forms 3.1.0.4 and earlier contain a critical unauthenticated file upload vulnerability. Learn who is exposed, how to update, and what to check.
Read articleA customer thought their WordPress site was fine. Their first BugShield checks uncovered malware that had been sitting on the server for months.
Read articleElementor Pro 4.2.1 and earlier contain a critical file upload vulnerability under active attack. See who is exposed, what to check, and why you should update to 4.2.2.
Read articleAll-in-One WP Migration 7.109 and earlier contain a serious SQL injection vulnerability. Learn how the issue works and what WordPress site owners should do.
Read articleWishlist Member account takeover, CVE-2026-12949, affects versions through 3.34.1. Learn about the 3.34.2 fix, current update advice and account checks.
Read articleWordPress 7.0.4 patches CVE-2026-65640, an Author-level Postscript upload RCE when Imagick and Ghostscript are present. See who is affected and what to do.
Read articleA WordPress plugin supply chain attack hit BdThemes in August 2026. See which plugins were affected, how hidden admins were created, and how to check your site.
Read article