Wishlist Member account takeover: unauthenticated mergewith bug in 3.34.1
Wishlist Member account takeover is an unauthenticated bug in WishList Member X through 3.34.1 via the mergewith parameter. See who is affected and what to do.
Read articleBlog
From the BugShield team
Product updates, WordPress advice, and stories from behind the shield.
WordPress 7.0.4: Author-level Postscript upload RCE (CVE-2026-65640)
WordPress 7.0.4 patches CVE-2026-65640, an Author-level Postscript upload RCE when Imagick and Ghostscript are present. See who is affected and what to do.
Read articleWordPress plugin supply chain attack: BdThemes plugins created rogue admins
A WordPress plugin supply chain attack hit BdThemes in August 2026. See which plugins were affected, how hidden admins were created, and how to check your site.
Read articleWordPress XSS2Shell: what it is, who is at risk, and how to check
WordPress XSS2Shell (CVE-2026-64638) is a login XSS that can lead to RCE. See who is at risk, patched versions, and check your site with our free tool.
Read articleAccount security first: 2FA and Active Sessions on BugShield
WordPress security is not only plugins and scans. Optional authenticator 2FA and Active Sessions help lock down the BugShield account that holds your sites and vault.
Read articleBest shared hosting for WordPress: how to compare plans in 2026
A criteria-first guide to choosing shared WordPress hosting. Compare PHP limits, staging, backups, support, and when shared stops being enough.
Read articleBest VPS for WordPress: how to compare plans without brand bias
Compare WordPress VPS options by resources, managed vs unmanaged, panel tooling, and real operating costs before you migrate.
Read articleHow to set up a server for WordPress
A practical WordPress server checklist: stack choices, hardening, SSL, backups, and the steps that keep a new VPS from becoming an emergency.
Read articleIntroducing BugShield: WordPress care that actually fixes things
BugShield is live. Here is why we built a platform for WordPress owners who are tired of chasing freelancers every time something breaks.
Read article