The big picture

  • The big picture

    Two WordPress security scares in one week. Check your site today.

    Two things hit WordPress sites on 19 to 21 October 2026: critical PHP flaws that need your host to update, and UpdraftPlus connection keys that let attackers add admins. Update, check your users, then check your plugins.

    · 4 min read