19 stories tagged wordpress, newest first.
8 points by MatthiasNordwig | 7 comments
WordPress.org plugin page for Invisible Anti-Spam & CAPTCHA, a free GDPR-friendly plugin that blocks form spam using invisible client-side proof-of-work instead of CAPTCHAs.
4 points by zinngr | 1 comments
A notebook-style analysis of the leaked 'hexane archive', covering ten AfD party mailboxes and WordPress databases of afd.de and about 140 other party websites.
398 points by danlark1 | 184 comments
Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.
18 points by relatedcode | 11 comments
Landing page for OneDeploy, a service that provisions dedicated servers running any of 88 open-source apps with TLS certificates and nightly backups, from $32/month.
74 points by speckx | 34 comments
Matt Mullenweg's blog post memorializing Eric Binnion, noting a 30-day extra HTTP header added via Nginx across WordPress sites in his honor.
117 points by ilamont | 141 comments
TechCrunch article reporting that Automattic has a new board of directors following a failed attempt to put its CEO on leave.
226 points by vntok | 124 comments
GitHub security advisory for a critical WordPress unauthenticated path traversal in page-template resolution leading to conditional RCE, listing affected and patched versions.
381 points by LeoPanthera | 252 comments
TechCrunch article reporting that Automattic's board has forced CEO Matt Mullenweg to take a leave of absence.
677 points by speckx | 380 comments
Risky Bulletin security newsletter reporting a hacker wiped Romania's land registry database, plus news on Graykey, Hugging Face hack, and WordPress RCE.
381 points by infosecau | 209 comments
Searchlight Cyber research post by Adam Kues describing finding a WordPress remote code execution vulnerability using GPT5.6 for about $25.
1116 points by speckx | 312 comments
Anchor Hosting blog post describing how someone acquired 30 WordPress plugins and inserted a backdoor into each of them.
650 points by elithrar | 481 comments
Cloudflare blog post introducing EmDash, a CMS positioned as a spiritual successor to WordPress designed to address plugin security problems.
547 points by ulrischa | 336 comments
Blog post arguing WordPress is in trouble amid the escalating dispute between Automattic's Matt Mullenweg and WP Engine, including the WP Engine Tracker site.
344 points by impish9208 | 141 comments
TechCrunch article reporting that Matt Mullenweg deactivated WordPress.org accounts of contributors who were planning a fork of WordPress.
407 points by kbarmettler | 171 comments
CourtListener docket entry for the N.D. California court order on WP Engine's motion for a preliminary injunction against Automattic.
![Screenshot of wpengine.com: Filed: WP Engine Inc. v Automattic Inc. and Matthew Charles Mullenweg [pdf]](https://hn.urlbox.com/shots/renders/2024/10/3/73270975-adc9-4415-83ed-171893678646.jpg)
510 points by dangrossman | 519 comments
PDF of the legal complaint filed by WP Engine against Automattic and Matt Mullenweg, with exhibits, hosted on wpengine.com.
510 points by openplatypus | 424 comments
TechCrunch article reporting that WordPress.org banned WP Engine and blocked it from accessing WordPress.org resources.
391 points by joshbetz | 145 comments
Matt Mullenweg's blog post marking WordPress's 21st anniversary since he and Mike Little forked b2/cafélog for the first release.
431 points by disadvantage | 181 comments
Landing page for WordPress Playground, a tool that runs a full WordPress instance entirely in the web browser for trying blocks, themes, and plugins.