@WPSecScanner

https://xitter.cf/t.co/BGIhvSBPuC is a free online WordPress security scan for detecting and reporting WordPress vulnerabilities. No installation required #SaaS

 Funäsdalen, Sweden
wpsec.com
Joined April 2016
  • Tweets1.4K
  • Following5.6K
  • Followers7.8K
236Media
How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools: blog.wpsec.com/finding-vulne… #bugbounty #wordpress #bugbountytip #cybersecurity #blueteam #infosec #pentesting #ethicalhacking #vulnerability #appsec #wordpresssecurity #websecurity #securecoding #staticanalysis #ai #securityresearch #devsecops #programming #php

How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools - WPSec

Learn how to find vulnerabilities in WordPress plugins using static analysis tools like Semgrep and AI-powered code review with ChatGPT.

blog.wpsec.com
3
6
1,270
We found a backdoor WordPress-plugin communicating with: * update.02may2024[.]com - Update metadata and code packages * heartbeat.02may2024[.]com - Site, plugin and version inventory * log.02may2024[.]com - Error reporting Anyone seem these? Plugin name was WP-Spam Shield Pro
1
140
Introducing TLS Health: A Deep HTTPS Check for Your WordPress Site blog.wpsec.com/introducing-t… #WordPress #CyberSecurity #TLS #SSL

Introducing TLS Health: A Deep HTTPS Check for Your WordPress Site - WPSec

A padlock in the address bar only tells you a secure connection was made. TLS Health checks what sits behind it: outdated protocols, expired or mismatched certificates, weak ciphers, and known...

blog.wpsec.com
1
127
We checked 14,114 WordPress sites. Nearly half had issues a version-based vulnerability scan wouldn’t catch! Meet WPSec Site Security: checks for exposed files and configuration gaps, plus an A–F security grade. See how it works: blog.wpsec.com/introducing-s…

Introducing Site Security: A Security Grade for Your WordPress Site - WPSec

A vulnerability scan tells you whether anything you installed is known to be broken. Site Security answers a different question: what is your WordPress site giving away right now. Here is what we...

blog.wpsec.com
2
3
529
WPSec - WordPress Security Scanner retweeted
WPSec - WordPress Security Scanner
@WPSecScannerJun 30
Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed? blog.wpsec.com/your-wordpres… #WordPress #AttackSurface #CyberSecurity

Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed? - WPSec

A clean vulnerability scan only tells you half the story. Here is what your WordPress attack surface is, why it matters even when every plugin is patched, and how WPSec's Attack Surface Analysis...

blog.wpsec.com
2
5
717
Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed? blog.wpsec.com/your-wordpres… #WordPress #AttackSurface #CyberSecurity

Your WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed? - WPSec

A clean vulnerability scan only tells you half the story. Here is what your WordPress attack surface is, why it matters even when every plugin is patched, and how WPSec's Attack Surface Analysis...

blog.wpsec.com
2
5
717
WPSec - WordPress Security Scanner retweeted
WPSec - WordPress Security Scanner
@WPSecScannerMar 9
How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools: blog.wpsec.com/finding-vulne… #bugbounty #wordpress #bugbountytip #cybersecurity #blueteam #infosec #pentesting #ethicalhacking #vulnerability #appsec #wordpresssecurity #websecurity #securecoding #staticanalysis #ai #securityresearch #devsecops #programming #php

How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools - WPSec

Learn how to find vulnerabilities in WordPress plugins using static analysis tools like Semgrep and AI-powered code review with ChatGPT.

blog.wpsec.com
3
6
1,270
Is WordPress Secure? blog.wpsec.com/is-wordpress-… #WordPress #CyberSecurity

Is WordPress Secure? - WPSec

Is WordPress secure? Learn about WordPress Core, plugin and theme security, hardening techniques, and how to protect your site from cyber attacks.

blog.wpsec.com
2
6
297
The Full Story of CVE-2024-10924: Authentication Bypass in the Really Simple Security Plugin: blog.wpsec.com/the-full-stor… #WordPressSecurity #WordPress #AuthenticationBypass #SecurityAlert #Cybersecurity #Infosec #PluginVulnerability #UpdateNow #PatchNow #WebSecurity #WPPlugins #SiteSecurity

The Full Story of CVE-2024-10924: Authentication Bypass in the Really Simple Security Plugin - WPSec

With the Really Simple Security plugin, WordPress users can easily improve the security of their websites with features such as: Automatic enforcement of SSL/TLS to ensure secure, encrypted communi...

blog.wpsec.com
2
291
Our wpsec-cli is now updated to version 0.5.0: github.com/wpscanner/wpsec-c…

GitHub - wpscanner/wpsec-cli: WPSec command line tool

WPSec command line tool. Contribute to wpscanner/wpsec-cli development by creating an account on GitHub.

github.com
2
1
13
763
WPSec - WordPress Security Scanner retweeted
WPSec - WordPress Security Scanner
@WPSecScanner7 May 2025
Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited: blog.wpsec.com/critical-vuln… #WordPress #Security #CyberSecurity

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited - WPSec

On April 30, 2025, a critical security vulnerability was publicly disclosed in the OttoKit: All-in-One Automation Platform (formerly SureTriggers) WordPress plugin. The flaw allows attackers to gain...

blog.wpsec.com
2
1
3
791
Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited: blog.wpsec.com/critical-vuln… #WordPress #Security #CyberSecurity

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited - WPSec

On April 30, 2025, a critical security vulnerability was publicly disclosed in the OttoKit: All-in-One Automation Platform (formerly SureTriggers) WordPress plugin. The flaw allows attackers to gain...

blog.wpsec.com
2
1
3
791
The Full Story of CVE-2024-6386: Remote Code Execution in WPML: blog.wpsec.com/the-full-stor… #wordpress #vulnerability #CVE #RCE #RemoteCodeExecution #WPML #CyberSecurity #Security

The Full Story of CVE-2024-6386: Remote Code Execution in WPML - WPSec

The WordPress Multilingual Plugin (WPML), with over 1,000,000 active installations, was vulnerable to Remote Code Execution (RCE) via a Server-Side Template Injection (SSTI) vulnerability in the Twig...

blog.wpsec.com
3
2
462
WPSec - WordPress Security Scanner retweeted
WPSec - WordPress Security Scanner
@WPSecScanner21 Oct 2024
Listen to our new AI-generated WordPress song: suno.com/song/40e9c755-9feb-… #WordPress #CyberSecurity #Hackers

WordPress Heroes WPSec.com

Listen and make your own on Suno.

suno.com
1
1
3
728
Listen to our new AI-generated WordPress song: suno.com/song/40e9c755-9feb-… #WordPress #CyberSecurity #Hackers

WordPress Heroes WPSec.com

Listen and make your own on Suno.

suno.com
1
1
3
728
Updated Pricing for WordPress Vulnerability Scanning Service: support.wpsec.com/hc/en-us/a…
3
304
🚨 We sincerely apologise for the recent service disruption during our server upgrade. We’ve resolved the issue and are committed to preventing future occurrences. For more details, please read our full update here: support.wpsec.com/hc/en-us/a… 🙏
2
335
4 Most Common WordPress Vulnerabilities (And How to Fix Them) blog.wpsec.com/4-most-common… #wordpress #CyberSecurity

4 Most Common WordPress Vulnerabilities (And How to Fix Them) - WPSec

Understanding the most common WordPress vulnerabilities can help you protect your website. Here's what you need to know!

blog.wpsec.com
2
2
384
WPSec - WordPress Security Scanner retweeted
WPSec - WordPress Security Scanner
@WPSecScanner12 Aug 2024
WordPress Forensic Investigations: Unveiling the Digital Clues: blog.wpsec.com/wordpress-for… #WordPress #DFIR #IncidentResponse #EvidenceCollection #LegalProceedings #CompromisedFiles #LogAnalysis #MalwareScanning #DatabaseAnalysis #FileIntegrityMonitoring #Backdoors #PHPObfuscation #HTTPSEncryption #AntiForensics

WordPress Forensic Investigations: Unveiling the Digital Clues - WPSec

Unfortunately, WordPress, the most popular content management system, also attracts its fair share of malicious actors. When a security incident occurs on a WordPress site, conducting a thorough...

blog.wpsec.com
2
2
4
1,397
WordPress Forensic Investigations: Unveiling the Digital Clues: blog.wpsec.com/wordpress-for… #WordPress #DFIR #IncidentResponse #EvidenceCollection #LegalProceedings #CompromisedFiles #LogAnalysis #MalwareScanning #DatabaseAnalysis #FileIntegrityMonitoring #Backdoors #PHPObfuscation #HTTPSEncryption #AntiForensics

WordPress Forensic Investigations: Unveiling the Digital Clues - WPSec

Unfortunately, WordPress, the most popular content management system, also attracts its fair share of malicious actors. When a security incident occurs on a WordPress site, conducting a thorough...

blog.wpsec.com
2
2
4
1,397
Load more