Our "State of WordPress Security 2026" report is now live! 💥 This year we took a step back to look at the impact of vulnerabilities rather than the overall numbers. We also teamed up with Monarx to explore how malware campaigns and techniques evolved during 2025. **Key learnings:** ⚠️ More high severity vulnerabilities were found in 2025 than in the two previous years *combined* ⚡ Median time from discovery to mass exploitation for severe vulnerabilities is just 5 hours ❌ 46% of vulnerabilities were not fixed by developer by the time of public disclosure 💸 76% of vulnerabilities found in premium components were exploitable 🥷 Increased usage of uploader scripts suggests attackers are adopting more complex strategies Read the whitepaper for the full insights ( 🔗 link in comments!)

If you’re at @MSPglobalevent and looking to protect your customers websites against vulnerabilities that traditional WAFs fail to mitigate - meet us tomorrow by finding the booth that’s not blue and let’s have a chat! 🫡 #mspglobal

@RocketDotNet @wearehostingcom

Our amazing @iamrashminagpal was invited to give a talk about Quantum AI at CERN. 🪐

Secure your WordPress plugins with the Patchstack AI code review tool! Available as part of the new Security suite. More information in 🧵

67.4% of web hosting companies have said WordPress vulnerabilities are their biggest security challenge. Not with Patchstack! 😉

Update: The funding was restored and CVE program will continue to operate as normal.

Today we surpassed 10k ( 😱) confirmed vulnerability CVE ID's, most of them in WordPress ecosystem. For a deeper dive into what such numbers mean for WordPress and its safety, check our latest annual report (🔗in thread):

Full webinar (not gated!) youtube.com/watch?v=8XcgyQ_M…

Often running an agency feels like you're barely keeping your head above water 🌊 But what do enterprise agencies do different to get ahead of that? Tune in to our webinar ft. @karimmarucchi for a blueprint on enterprise success: 🔗 Video link in thread: