wpbob.com - WordPress, built like it matters

cloud_network_security_breach

UpdraftCentral Breach: Stolen Keys Used to Backdoor WordPress Sites

Attackers breached TeamUpdraft and used stolen UpdraftCentral connection keys to install backdoor plugins on connected WordPress sites. Who is exposed, what the backdoor looks like, and why updating UpdraftPlus alone isn't enough.

wp_kses_wordpress_html_sanitizer_rebuilt_on_the_html_api_wpbob_development_featured_2400x1260

wp_kses() Rebuilt on the HTML API: What Changes in WordPress 7.2

webp-express-cve-2026-97328-html-parser-xss-wpbob-cve-watch-2400x1260

WebP Express CVE-2026-97328: When the HTML Parser Writes the Attack

Latest articles

your_hosts_php_version_is_a_security_setting_wpbob_blog_featured_2400x1260

Blog Oct 22, 2026

Your Host’s PHP Version Is a Security Setting

pixelyoursite_cve_2026_109987_featured_2400x1260

CVE Watch Oct 22, 2026

PixelYourSite CVE-2026-109987: Your Page Cache Serves the Attack

wordpress-under-the-hood-development

Development Oct 21, 2026

WordPress 7.2 Beta 1: What Changes Under the Hood

php-wordpress-foundation-embargo-leak

CVE Watch Oct 21, 2026

PHP2Shell: Two Critical PHP Flaws Leaked Before the Patch

wordpress-core-7-1-3-security-patches

CVE Watch Oct 20, 2026

WordPress 7.1.3: Seven Core Security Fixes, Explained

A code editor window feeding HTML straight through to a browser window, with content filters switched off along the path between them

Development Oct 20, 2026

Turning the Editor into a Plain HTML Window

A plugin piece being inspected at a checkpoint into a WordPress site, beside a checklist, with other plugin pieces waiting outside

Blog Oct 20, 2026

How a Plugin Earns Its Place

$A WordPress plugin package arriving from a trusted vendor with a hidden backdoor inside it, spreading into a website$ CVE Watch Oct 20, 2026

Rank Math PRO CVE-2026-111862: Official Update Shipped a Backdoor

A glowing blue file cabinet of folders with an amber path escaping over its top edge and down to a file outside it

CVE Watch Oct 19, 2026

WordPress Core CVE-2026-87902: Path Traversal Under Active Attack

Explore popular topics

CVE Watch

Development

Blog