Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The hidden security risks of slow mobile WordPress sites

Mobile lag masks threats. When pages stall, admins postpone updates, logs grow noisy, and attackers get more tries. Treat WordPress security as a performance problem too, because mobile site speed directly shapes your risk. Harden your stack and cut the mobile attack surface, start with mobile optimization for WordPress websites.

Unauthenticated SSRF in Ditty WordPress Plugin (CVE-2025-8085)

A critical Server-Side Request Forgery (SSRF) vulnerability—CVE-2025-8085—has been discovered in the popular WordPress plugin “Ditty (News Ticker & Display Items)” for versions prior to 3.1.58. The issue resides in the displayItems REST API endpoint (wp-json/dittyeditor/v1/displayItems), which lacks authentication and authorization, allowing unauthenticated attackers to force the server to fetch arbitrary URLs—internal or external—via crafted JSON payloads.

Thousands of WordPress Sites at Risk After Gravity Forms Breach

A critical vulnerability in the popular Gravity Forms WordPress plugin has led to widespread malware injections across thousands of sites. The flaw is being actively exploited by threat actors, some of whom are inserting backdoors and malicious JavaScript into WordPress sites to carry out data theft, SEO poisoning, and client-side attacks.

Security Bulletin: OttoKit WordPress Plugin Vulnerability, CVE-2025-27007

CVE-2025-27007 is a critical unauthenticated privilege escalation vulnerability affecting the OttoKit WordPress plugin (formerly SureTriggers), which is used by over 100,000 websites for workflow automation and third-party integration. The vulnerability exists in the plugin’s create_wp_connection() function, which fails to properly verify user authentication when application passwords are not configured.

Unleashing Growth in the Digital World through Professional WordPress Consulting

Building and maintaining a strong online presence is needed rather than a necessity for businesses of any size. Regardless of being an entrepreneur, a small business, or an enterprise leader, the website plays a central role in marketing, sales, and customer service. WordPress is the most worthwhile content management system and has earned a widely accepted standing. Nevertheless, to harness the power of WordPress to the fullest, several organizations go for seasoned WordPress consulting services.

Proton66 Part 2: Compromised WordPress Pages and Malware Campaigns

Earlier this year SpiderLabs observed an increase in mass scanning, credential brute forcing, and exploitation attempts originating from Proton66 ASN targeting organizations worldwide that we are discussing in a two-part series. In the first part of this blog series, we investigated the malicious traffic associated with Proton66, revealing the extent of the mass scanning and exploit activities run by the SuperBlack ransomware-associated threat actors such as Mora_001.

Automate WordPress & LDAP Sync - Smarter, Faster, Easier | LDAP Advanced Sync

The Advanced Sync add-on for WordPress automatically imports and synchronizes LDAP/Active Directory users with your WordPress site. This automation saves time and effort, making sure your WordPress users are always up-to-date without the need for manual updates. Additionally, any password changes within WordPress are automatically reflected in the LDAP Server or Active Directory, enhancing both security and convenience.

Choosing the Right WordPress Hosting Provider for Professional Website Building

When it comes to building a professional website, selecting the right WordPress hosting provider is one of the most critical decisions you will make. Your hosting provider influences your site's speed, security, scalability, and overall performance. With the rise of user-friendly website builders like Elementor, the demand for hosting solutions tailored to support such tools has increased significantly.

Optimize Wordpress performance with Cloudflare's Automatic Platform Optimization

Does your WordPress site load too slowly? Cloudflare’s Automatic Platform Optimization (APO) plugin caches and serves your site from a global network, making site loads up to 72% faster! APO allows Cloudflare to serve your entire WordPress site on its global edge network, and would take HTML and CSS that would not typically be cached on the CDN to be done so automatically.