-
Simple Ways to Implement All-around WordPress Security
WordPress powers close to 40% of all websites (W3Techs, November 2026), which makes it the most attacked CMS on the internet. Every new install gets probed within hours: bots try default logins, scan for vulnerable plugins, post spam into comment and registration forms, and look for a way to drop malware. Securing a WordPress site…
FEEDBACK LOG
The Latest
-
CleanTalk Research Team Discovers Stored XSS Vulnerability in WP SEOPress Plugin (v7.7.1)
The CleanTalk Research Team identified a critical Stored XSS (Cross-Site Scripting) vulnerability in the WP SEOPress plugin, version 7.7.1. This flaw can be exploited by attackers with contributor privileges to create new admin accounts, potentially granting them full control of your WordPress website. Understanding Stored XSS (CVE-2024-4899) Stored XSS vulnerabilities allow attackers to inject malicious…
-
Flamingo Plugin new option – “Not Saving Spam Messages”
As you know, we have direct integration with the most popular contact form plugin – Contact Form 7. Also, you are probably familiar with the Flamingo – a message storage plugin, which doesn’t store submitted messages. Earlier, when using these two plugins simultaneously with CleanTalk Anti-Spam, messages recognized as spam would end up in the…
-
Attention CleanTalk Anti-Spam Users! Important Update Regarding Public Widget
We’re writing to inform you that the public widget for CleanTalk Anti-Spam will be removed from the plugin and no longer be supported after August 1, 2024. What does this mean for you? The public widget, which is typically displayed on public pages and demonstrates the number of spam attacks, is no longer considered compatible…
-
Critical Vulnerability Discovered in Gutenberg Blocks by Kadence Blocks Plugin
Our team at CleanTalk prioritizes the safety and security of the WordPress ecosystem. Through routine security testing, we’ve identified a critical vulnerability in the Gutenberg Blocks by Kadence Blocks plugin. This flaw poses a serious threat to WordPress websites, as it allows attackers to inject malicious code and potentially gain complete control. Understanding the Threat…