WordPress Flaws and Vulnerabilities

Remediation Plan Following a Supply Chain Attack

October 1, 2026 0 comments

1. Retrospective and Forensic Analysis of the Infiltration Chain Faced with the resurgence of supply chain attacks targeting the WordPress ecosystem, the simultaneous compromise of dozens of extensions through the premeditated purchase of developer accounts represents a critical threat to the integrity of website fleets.

Read more
SecuPress

SecuPress v2.7 aka Disco

September 15, 2026 0 comments

A 2.6.4 that turns into a 2.7? Why not… Here’s a slightly heavier major: 5 new features, a firewall bumped to 8G, backups that finally leave the web root, 3 security fixes, and a bunch of improvements. SecuPress 2.7 Disco is the Mark XXVII, an Iron Legion armor from Iron Man 3. Tony built it […]

Read more
SecuPress

SecuPress v2.6.1 and Co.

April 6, 2026 0 comments

Minor versions usually don’t deserve a blog post, and neither does this one, but for now is still a good time to talk about it. Let’s look back at 2025 and early 2026 regarding the secupress.me website and the troubles it went through. It’s late March 2026, things are already much better, I’ve patched a […]

Read more
SecuPress

SecuPress v2.6 aka Mark L

January 8, 2026 0 comments

It’s becoming customary now: a major update within a short delay. This version brings one new feature and one nice admin UI feature, then a significant improvement to the malware scanner interface, and finally a few minor bug fixes.

Read more
Web Flaws and Vulnerabilities

Altcha GDPR Compliant Captcha and Bot Protection <=2.2 Multiple Vulnérabilities

December 3, 2025 0 comments

Altcha is a privacy-focused alternative to reCAPTCHA. This extension promises to eliminate tracking, cookies, and fingerprinting, offering robust, accessible, and globally compliant security without any complicated setup. Their service is 100% self-hosted, with no external requests or data sharing. You can find version 2 of this extension at https://github.com/altcha-org/altcha-wordpress-next/releases. This version 2 isn’t on wp.org […]

Read more