WP SQLite DB enables WordPress to run on SQLite databases instead of MySQL. This lightweight solution simplifies WordPress hosting and development by eliminating separate database server requirements.

Pagora AI launches as a WordPress plugin that generates blog posts and social media content from topics. The tool integrates directly into WordPress dashboards for streamlined content creation workflows.

Developer 47Cid releases WP2Shell Lab, an open-source framework for testing WordPress security vulnerabilities in controlled environments. The tool helps security professionals identify exploits before they impact production systems.

Critical WordPress core vulnerability CVE-2026-63030, known as WP2Shell, enables pre-authentication remote code execution. Administrators must implement immediate protective measures and apply security patches.

Exploit brokers offer up to $500,000 for WordPress RCE vulnerabilities. A security researcher demonstrates how AI assists in discovering these high-value zero-day exploits, revealing the lucrative underground market for security flaws.

“`json { “title”: “WordPress Vulnerabilities Put 90 Million Websites at Risk”, “slug”: “wordpress-vulnerabilities-90-million-websites-at-risk”, “meta_description”: “Critical WordPress security flaws affect millions of sites. Hackers actively exploit vulnerabilities in versions 6.9.0-6.9.4 and 7.0.0-7.0.1.”, “keywords”: [“WordPress vulnerabilities”, “WordPress security”, “website security”, “WordPress hack”, “cybersecurity”], “primary_keyword”: “WordPress vulnerabilities”, “content”: “ Hackers are actively exploiting critical security flaws in WordPress,…

SearchCue launches as a WordPress plugin, bringing typeahead search, AI-powered answers, and conversational search to WordPress sites. Built on two years of search technology development from the Monocle Search team.

WordPress patched a critical zero-day vulnerability called wp2shell that allowed attackers to compromise sites through a single anonymous web request, even on fresh installations without plugins.

WordPress patched critical wp2shell vulnerabilities allowing unauthenticated remote code execution on versions 6.9-7.0. The attack chain combines REST API confusion with SQL injection, requiring no preconditions to exploit.