Skip to content

Blog

Practical maintenance, backup and security notes for agencies and freelancers managing many WordPress sites.

Wordfence

Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server

On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of 9.8 out of 10. A crafted PDF containing a JPEG 2000 image can make Ghostscript write attacker-influenced bytes past the end of a memory buffer. We developed that corruption into unauthenticated remote code execution on a…

via Wordfence

Wordfence

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to ...Read More

via Wordfence

Wordfence

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 21, 2026 to September 27, 2026)

Last week, there were disclosed in that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, ...Read More

via Wordfence

Wordfence

Quarterly WordPress Threat Intelligence Report – Q2 2026

Wordfence's Q2 2026 threat intelligence report covers 2,073 published WordPress vulnerabilities, 182 high threat vulnerabilities, 10.4 billion blocked WAF attacks, 18.2 billion blocked brute force attacks, and 573K infected sites, plus trends in vulnerability classes, attacker activity, and malware.

via Wordfence

Wordfence

Wordfence Bug Bounty Program Monthly Report – June 2026

In June 2026, the Wordfence Bug Bounty Program received 1066 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelligence team, with validated vulnerabilities responsibly disclosed to vendors, often through the Wordfence Vulnerability ...Read More

via Wordfence

WordPress maintenance notes, once or twice a month

Backup, security and update practices for people who look after more than one WordPress site. No sales emails, unsubscribe in one click.

We send you a confirmation email first. Your address is only used for this newsletter — see our privacy policy.