Fastest vulnerability protection for WordPress websites! Official security partner for the leading web hosting companies, agencies, and plugin devs.
Joined May 2016
- Tweets4.5K
- Following2.3K
- Followers3.2K
- Likes3.5K
👇If you're a web host, looking to host NodeJS apps and vibe coded websites. We should talk!
⚡ @WebhostingToday reached out to both us (@patchstackapp) and @Hostinger to talk about the partnership we launched to protect the NodeJS apps.
So far, it has detected vulnerable dependencies on more than 10,000 customer websites, with thousands of issues resolved through automatic fixes or manual updates within just a few weeks.
Even though @Hostinger was the fastest to act, we are expanding our support to Javascript ecosystem with all our web hosting partners. Vibe coding is the "new WordPress" for many non-technical builders, but also for web hosting companies that need to answer to the demand and provide hosting.
The average customer profile behind a WordPress website and a vibe coded app is the same - and so are the security challenges.
If you're a web host looking towards Javascript/NodeJS hosting or you're building your own vibe coding tool, let me know. I have something to show you! 😎
webhosting.today/2026/08/06/…
⚡ 3 weeks have passed since the WordPress 7.0.2 Remote Code Execution patch. Now, WordPress core patched another 12 vulnerabilities. Patchstack users protected at disclosure. More details in our advisory.
patchstack.com/articles/word…
Patchstack retweeted
Kudos to @OliverSild 🙇♂️
@patchstackapp sent us a security report. We patched the plugin, but when the report went live, the priority report was too high.
I pinged Olivier. He listened, researched, and fixed the issue.
It's not surprising that Patchstack is doing so well 👏
Patchstack retweeted
Weeks ago when #WP2Shell dropped and OpenAI Sol Ultra took most of the credit - all I thought about was how all the other labs and AI-pentest companies will rush to prove they can find something in the WordPress core too.
Well, today, 3 weeks later - we have the next WordPress core version release with not one, but 12 vulnerabilities being patched. And as expected, the issues have been reported by @AnthropicAI , @pwn_ai , @AikidoSecurity and others.
The nastiest one is a login screen XSS, which via some social engineering could lead to Remote Code Execution. Luckily, WordPress is auto-updating fast and none of the vulnerabilities are mass-exploitable like WP2Shell was.
As always, @patchstackapp customers received mitigation rules right at the disclosure.
patchstack.com/articles/word…
Our "State of WordPress Security 2026" report is now live! 💥
This year we took a step back to look at the impact of vulnerabilities rather than the overall numbers.
We also teamed up with Monarx to explore how malware campaigns and techniques evolved during 2025.
**Key learnings:**
⚠️ More high severity vulnerabilities were found in 2025 than in the two previous years *combined*
⚡ Median time from discovery to mass exploitation for severe vulnerabilities is just 5 hours
❌ 46% of vulnerabilities were not fixed by developer by the time of public disclosure
💸 76% of vulnerabilities found in premium components were exploitable
🥷 Increased usage of uploader scripts suggests attackers are adopting more complex strategies
Read the whitepaper for the full insights ( 🔗 link in comments!)
Patchstack retweeted
Si te dedicas al mantenimiento de webs de WordPress, sabes que la seguridad no es opcional. Es una parte esencial del servicio que ofreces a tus clientes.
Por eso, este webinar con @patchstackapp está pensado para ti 💜
📅 16 de diciembre a las 17:00 CET
🎟️ Online y gratuito
Patchstack retweeted
Friday Feature Focus: Site Protect.
Powered by @patchstackapp, it runs at the PHP level with zero impact on performance
Virtual patches applied automatically
Malicious IPs blocked
User enumeration disabled
XML-RPC restricted to authenticated users
One toggle. €2/site/month
Patchstack retweeted
😱 When your security tool has a vulnerability of its own...
A critical RCE vulnerability was discovered in a major security tool used on 56 million+ websites and almost no one was talking about it.
So the @patchstackapp research team did.
Patchstack retweeted
We are thrilled by reports back from Scott & @courtneyr_dev .... 22 devs, 1 day, a working security-labeling layer connecting @fair_pm, @patchstackapp & #WordPress packages. Proud to support this step toward decentralized, DID-powered plugin security. Many thanks @CaroleOlinger
ALT Scott K. Clark stands in front of a “CloudFest USA, Nov. 4, Miami, Florida” presentation screen, holding a microphone as they speak, wearing glasses, a black PHP hoodie, and jeans
FAIR and Patchstack Build Security MVP at CloudFest USA Hackathon
therepository.email/fair-and…
Patchstack retweeted
87.8% of vulnerability exploits still bypass hosting defenses, and too many agencies assume hosts keep them safe but the data says otherwise.
So we’ve dropped Site-Protect (virtual patching) from €3 → €2.
Real protection should be accessible to everyone. Thanks @patchstackapp
Patchstack retweeted
What an epic day... Just doing a roundup now of the hackathon for the Fair.pm x @patchstackapp security labeller! Well done everyone
Patchstack retweeted
“AI is like a double-edged sword,” says Oliver Sild, a former hacker turned founder. “It can level the playing field between the defenders and the attackers but only if they move at the same pace, which they rarely do.” This tension is exactly what led him to build @patchstackapp.
Patchstack was built to protect the open-source ecosystem, using @Google’s Gemini 2.5 Pro to detect and block vulnerabilities before attackers can exploit them. Today, Patchstack safeguards millions of websites and powers the world’s largest network of ethical hackers.
(Source: goo.gle/47uk7hA)
Our new hosting integration is live 🎉
Plug-and-play protection, no infra work needed. Simply deploy Patchstack at scale to your users 🔌
Read more 🔗
patchstack.com/articles/new-…
Patchstack retweeted
Those sneaky @patchstackapp-ers have done it again with their LinkedIn header.
If you're at @MSPglobalevent this week, come say hi at their booth where I'll be fighting them irl about this 😡
If you’re at @MSPglobalevent and looking to protect your customers websites against vulnerabilities that traditional WAFs fail to mitigate - meet us tomorrow by finding the booth that’s not blue and let’s have a chat! 🫡 #mspglobal
Patchstack retweeted
Como siempre, muchos regalitos chulos de los patrocinadores, pero eso no es lo mejor de ellos. Si gente y sus servicios, sí.
Gracias @patchstackapp y @weglot !!
#WPAgencyForum
Patchstack retweeted
Most of vulnerabilities tend to come from plugins and we take that seriously. And thanks to @patchstackapp who monitors these issues to promptly report to plugin authors - it all gets addressed as the top priority from our side
#WordCampGdynia #WCGdynia
