Backuply SQL Injection (CVE-2026-93953): Update & Check Your Site
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
Security
Rank Math PRO 3.0.123 Malware: How to Check and Clean Your Site
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.
Bricksforge RCE (CVE-2026-85097) exploited: patch and check your site
Bricksforge 3.1.8.9 and older lets anyone upload and run PHP (CVE-2026-85097), and it’s exploited now. How to patch, block it and check if you were hit.
5 (Less known) WordPress Security Tips to keep your website safe from hackers 💁
99% of WordPress users are already aware of a number of security tips, including: But in this guide, I’ll go over a few other, lesser-known techniques that can help keep hackers out of your WordPress website. Not just hide – disable wp-admin ❌ Security by obscurity is nothing more than a house of cards. – … Read full article →
4 Security Checkpoints for your WordPress Website
Security is a result of security “practices” rather than plugin “functionality”. No security plugin is perfect, but we make do, and that, like everything else in life, is what defines the outcome. Here’s a simple diagram of how an attacker tries to get inside your website. There are 4 levels that each request has to … Read full article →