Month in WordPress: June 2024

1. Supply chain attack on WordPress.org plugins WP Team: We identified that some plugin authors were reusing passwords exposed in data breaches elsewhere. The compromised accounts were not the result of an exploit on WordPress.org. Instead, the attackers used recycled passwords to add malicious code to a few plugins on the WordPress.org Plugin Directory. This […]

Month in WordPress: May 2024

1. WordPress 6.5.3 maintenance release now available The latest minor version of WordPress, 6.5.3, is now available for download. This release includes fixes for 12 bugs in the core and 9 issues in the block editor. For more details on the fixed bugs, refer to the summary provided here. 2. Google I/O shared year Baseline […]