最新のセキュリティ情報

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek .

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the

WordPress 7.1.3 Maintenance and Security Release

This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background […]

WordPress Coreの脆弱性CVE-2026-87902についてまとめてみた

2026年9月22日、WordPressは、WordPress Coreに深刻な脆弱性が確認されたとして、修正版を公開、さらに4.7系までの古い系列にも同様に修正を提供しました。ここでは関連する情報をまとめます。 どんな脆弱性が確認されたの? WordPress Coreのページテンプレートの解決(get_page_template())で、認証不要の攻撃者が、一定の条件下で、有効なテーマのディレクトリ外にある読み取り可能なローカルPHPファイルをインクルードさせられる。サーバー環境と有効なテーマの双方の前提条件を満たす場合は、リモートコード実行(RCE)に至りうる*1。(出典: 1, 3, …

WordPress 7.1.1 Maintenance and Security Release

This security and maintenance release features 17 bug fixes on Core, 19 bug fixes for the Block Editor, and 11 security fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.1 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update […]

WordPress 7.0.4 Release

WordPress 7.0.4 is now available WordPress 7.0.4 is now available which features a security fix. Because this is a security release, it is recommended that you update your sites immediately. You can update to WordPress 7.0.4 by downloading it from WordPress.org, or visiting your site’s Dashboard → Updates and clicking Update Now. Sites that support […]

WordPress 7.0.3 release

WordPress 7.0.3 is now available WordPress 7.0.3 is now available which features several security fixes. Because this is a security release, it is recommended that you update your sites immediately. You can update to WordPress 7.0.3 by downloading it from WordPress.org, or visiting your site’s Dashboard → Updates and clicking Update Now. Sites that support […]

WordPressの脆弱性対策について(CVE-2026-60137、CVE-2026-63030：wp2shell)

WP23

WordPress at 23 is simultaneously both the strongest and most precarious it’s ever been. Last week, we shipped WordPress 7 to the world. In seven days, 46% of all WordPresses, tens of millions across countless different hosting environments, are already on 7.0, auto-updated with no breakage. From a Raspberry Pi to the most secure sites […]

WordPress 6.9.2 Release

WordPress 6.9.2 is now available This is a security release that features several fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 6.9.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic […]

Pyh.conf’25: a new PHP conference for the Russian-speaking community

Pyh.conf is a fresh PHP conference that brings together the Russian-speaking PHP community — whether you work with Bitrix, WordPress, Symfony, Laravel, Yii, AMPHP, Swoole, or anything else. Projects differ, approaches vary, but the language is one: PHP. It’s a space to share experience, connect with others, and talk about designing, developing, and maintaining all kinds of PHP backends. The program features 28 powerful talks, an open mic, a fail meetup, and a partner expo. September 19 Moscow + Online Schedule Get your ticket

Dropping security updates for WordPress versions 4.1 through 4.6

As of July 2025, the WordPress Security Team will no longer provide security updates for WordPress versions 4.1 through 4.6. These versions were first released nine or more years ago and over 99% of WordPress installations run a more recent version. The chances this will affect your site, or sites, is very small. If you […]

Introducing Fresh WordPress Themes

Combine the DX and performance of Fresh with the reliability and dependability of WordPress.

php[world] 2019 Call for Speakers

We are excited to announce the for php[world] 2019! Taking place this year at the Sheraton Tyson's Corner on (with full-day training options on the 22nd.) Call for Speakers October 23-24 At it’s heart, is the Washington D.C. area conference for programmers who use the PHP programming language. We’ve been running annually since 2014. php[world] 2019 PHP as a language and a community has been rapidly changing in the last few years. A staggering 83% of the Web runs on PHP, and those websites are built on frameworks such as Drupal, WordPress, Magento, Symfony, Laravel and Laminas (formerly Zend F…

php[world] 2018 - Call for Speakers

The teams at and are excited to announce we have opened up our for the 5th annual . php[architect] One for All Events Call for Speakers php[world] This year we are wanting to provide our attendees deep-dive content which teach core lessons about PHP. We also want talks covering advanced topics in applications and frameworks built in PHP (such as Drupal, WordPress, Laravel, Symfony, and Magento). We encourage submissions on technologies crucial to modern Web development such as HTML5, JavaScript, and emerging technologies. Ideas surrounding the entire software life cycle are often big hits for…

php[world] 2017: Call for Speakers

The teams at and are excited to announce we have opened up our for the 4th annual edition of . php[architect] One for All Events Call for Speakers php[world] This year we are refactoring php[world] into a more focused PHP conference concentrating on providing our attendees deep-dive content which teach core lessons about PHP. We also want talks covering advanced topics in applications and frameworks built in PHP (such as Drupal, WordPress, Laravel, Symfony, and Magento). We encourage submissions on technologies crucial to modern Web development such as HTML5, JavaScript, and emerging technolo…

php[world] 2016 Call for Speakers

We are excited to announce that the has opened for . Call for Speakers php[world] 2016 Now in its 3rd year, is the conference designed to bring the entire world of PHP together in one place, with dedicated tracks for the biggest applications and frameworks in the PHP community such as WordPress, Drupal, Magento, Joomla!, Symfony, Zend Framework, CakePHP, and Laravel. php[world] We need to hear from you what you want to speak about though. Talks that fit any of those frameworks or are related to PHP development are all welcome. We offer a comprehensive speakers package to make sure that our pr…

PHPConf.Asia 2015

Join us at - The First Pan-Asian PHP Conference PHPConf.Asia 2015 The inaugural pan-Asian PHP conference will take place on 22 & 23 September 2015 in - the Garden City of the East! Come and meet with the fastest growing PHP communities in Asia. More than 200 attendees are expected in this single track conference. Singapore Our keynote speakers are Rasmus Ledorf (), the creator of PHP and Jenny Wong () advocate for both the PHP and WordPress communities and an evangelist for PHP Women. Heard from ! @rasmus @miss_jwo 21 regional and international speakers are still available! Hop over to for mo…

php[world] 2015 Schedule Announced

The team at php[architect] is excited to announce the schedule for ! As always our conference is designed to bring all the various PHP communities together in one place to learn from each other. We will have separate tracks for PHP, Drupal, WordPress, Magento, Joomla!, Zend Framework, Symfony, Laravel, and CakePHP. php[world] 2015 This year we are expanding the conference to 6 concurrent sessions so that we can cover even more material. Join us for this very unique event from November 16th through November 20th. 5 day-long training sessions 12 separate tutorials 5 keynotes 60 conference sessi…

ZendCon 2015

Announcing ZendCon 2015, the global PHP conference, happening at the exciting Hard Rock Hotel & Casino in Las Vegas, Nevada. It will start with a full day of tutorials on October 19th and then continue with inspirational keynotes and breakout sessions through the 22nd. The conference will feature many of the top developers and speakers in the PHP space to deliver dedicated tracks centered around Zend Framework, Symfony, Laravel, WordPress, Joomla!, Drupal, and Magento. We will also host additional tracks for PHP best practices, PHP architecture, IBM i, and PHP 7. We look forward to seeing you…

php[world] 2015 Call for Speakers

The team at is once again running . The original conference designed to bring the whole world of PHP together in one place. With dedicated tracks for WordPress, Drupal, Joomla!, Magneto, Laravel, Symfony, Zend Framework, and CakePHP! php[architect] php[world] The is currently open, but only until June 6th, so get those submissions in soon! We are interested in sessions on any framework, application, or general PHP topics. We especially want to see sessions that are designed to encourage people to mingle and be exposed to other PHP communities that they don't interact with on a daily basis. Ca…