Keeping WordPress sites secure against vulnerabilities and attacks.
SolidWP's weekly report for 4 February 2026 disclosed 661 new WordPress vulnerabilities in seven days: 638 in plugins, 23 in themes, 164 completely unpatched. The same week, WordPress 6.9.1 dropped fixing 49 bugs. Core isn't the problem. Plugins are. Here's what UK businesses need to do right now.
A missing authorisation vulnerability in WP Go Maps (CVE-2026-0593) affects 300,000+ WordPress sites. The flaw allows unauthenticated attackers to modify map data. Update to version 10.0.05 immediately.
A perfect CVSS 10.0 vulnerability in the Modular DS WordPress plugin is being actively exploited to grant attackers instant administrator access. 40,000 sites affected. Update to version 2.6.0 immediately.