SecuPress Security Plugin for WordPress https://secupress.me
- [SecuPress v2.7 aka Disco](https://secupress.me/blog/secupress-v2-7/): A 2.6.4 that turns into a 2.7? Why not… Here’s a slightly heavier major: 5 new features, a firewall bumped to 8G, backups that finally leave the web root, 3 security fixes, and a bunch of improvements. SecuPress 2.7 Disco is the Mark XXVII, an Iron Legion armor from Iron Man 3. Tony built it […]
- [SecuPress v2.6.1 and Co.](https://secupress.me/blog/secupress-v2-6-1/): Minor versions usually don’t deserve a blog post, and neither does this one, but for now is still a good time to talk about it. Let’s look back at 2025 and early 2026 regarding the secupress.me website and the troubles it went through. It’s late March 2026, things are already much better, I’ve patched a […]
- [SecuPress v2.6 aka Mark L](https://secupress.me/blog/secupress-v2-6/): It’s becoming customary now: a major update within a short delay. This version brings one new feature and one nice admin UI feature, then a significant improvement to the malware scanner interface, and finally a few minor bug fixes.
- [Altcha GDPR Compliant Captcha and Bot Protection <=2.2 Multiple Vulnérabilities](https://secupress.me/blog/altcha-2-2-multiple-vulnerabilities/): Altcha is a privacy-focused alternative to reCAPTCHA. This extension promises to eliminate tracking, cookies, and fingerprinting, offering robust, accessible, and globally compliant security without any complicated setup. Their service is 100% self-hosted, with no external requests or data sharing. You can find version 2 of this extension at https://github.com/altcha-org/altcha-wordpress-next/releases. This version 2 isn&#8217;t on wp.org [&hellip;]
- [SecuPress v2.5 aka Makeshift](https://secupress.me/blog/secupress-v2-5/): Another major update with a short delay, I appreciate that, don&#8217;t you? And only 2 new features, one of which is just an option for an existing module, and that module is also a standalone plugin now.
- [Handle the ReDoS (Regular Expression Denial of Service), or Evil Regex](https://secupress.me/blog/evil-regex-the-redos-case/): You know I spend my time dissecting vulnerabilities, whether they’re simple or require a twisted mind to cause harm. Today, we’re talking about a sneaky attack—a simple coding mistake. Buckle up, because we’re diving into ReDoS, the nightmare of regular expressions (Regex) for developers.
- [SecuPress v2.4 aka Midas](https://secupress.me/blog/secupress-v2-4/): A major update, version 2.4, just two months after 2.3—that&#8217;s not bad. It’s less intimidating than the previous one. The changelog is short, and the risk of seeing a 2.4.20 version is very low. Let’s see what this new feature is and why it was added precisely.
- [SecuPress v2.3 aka Starboost](https://secupress.me/blog/secupress-v2-3/): This v2.3 may be the best version of SecuPress ever, read that again.
- [Widget Logic and the undesired JavaScript injection](https://secupress.me/blog/widget-logic-and-the-undesired-javascript-injection/): Timothée Allemmoz reported on the WordPress France Community Slack  that the Widget Logic plugin seemed to be hijacked. Let see this together. (TL;DR It&#8217;s infected but I&#8217;ll give you a solution to keep it!)
- [Anatomy of a Shortcode with its Flaws](https://secupress.me/blog/anatomy-shortcode-flaws/): During my research in free extensions, or during code audits ordered by customers, I find from time to time things so simple to correct and yet so devastating that I wanted to show you one, a beautiful one.