Prime Mover CVE-2026-115806: Update and Purge Planted Comments
Prime Mover 2.2.1 and older can unserialize a payload hidden in a comment. Update to 2.2.2, find planted comments with SQL, and check whether it fired.
WP-CLI
Duplicator CVE-2026-82814: Patch Before Your Next Migration
Duplicator 1.5.17 and Pro 4.6.10 are vulnerable to object injection via comments. Update to 5.0.0, clean installers and check comments with WP-CLI.
UpdraftCentral Key Compromise: Check & Clean Your WordPress Site
Stolen UpdraftCentral keys are backdooring WordPress sites. Delete leftover keys, find the hidden plugins and admin users, and clean up with WP-CLI.
Backuply SQL Injection (CVE-2026-93953): Update & Check Your Site
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
Rank Math PRO 3.0.123 Malware: How to Check and Clean Your Site
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.
Purge cache from W3 Total Cache plugin using WP-CLI
Here are some useful commands to clear cache from the terminal with wpcli: cdn_purge purge URLs from CDN and Varnish flush all flushes all cache related to W3TC (Page Cache, OC, DB Cache, Minify, etc.) flush page flushes pages cache only flush posts flushes both pages & posts cache flush database flushes DB cache flush … Read full article →