WordPress is updating soon to version 5.6 which aims to be compatible with PHP 8. However, WordPress cautioned that it should be considered “beta-compatible” and explained why upgrading to PHP 8 ...

A severe WordPress vulnerability which has been left a year without being patched has the potential to disrupt countless websites running the CMS, researchers claim. At the BSides technical ...

Automattic, the developer of WordPress, has announced that it will resume contributing to the WordPress project. When Automattic released WordPress 6.8 in April 2025, they stated that 'this will be ...

The WordPress open-source publishing and content management system is written in the PHP programming language. You can easily create and configure websites for your small business using WordPress, but ...

Attackers are using Eval PHP, an outdated legitimate WordPress plugin, to compromise websites by injecting stealthy backdoors. Eval PHP is an old WordPress plugin that allows site admins to embed PHP ...

The premium WordPress plugin 'Gravity Forms,' currently used by over 930,000 websites, is vulnerable to unauthenticated PHP Object Injection. Gravity Forms is a custom form builder website owners use ...

The issue impacts several content management systems, including Typo3 and WordPress, as well as widely-used PDF generation library TCPDF. Researchers have created a proof-of-concept exploit that would ...

Taylor Otwell says skip the clever code, keep it simple Taylor Otwell, inventor and maintainer of popular PHP framework ...