WordPress 7.2 Removes load-scripts.php: Clean Up wp-config.php
WordPress 7.2 drops admin script concatenation. Find and remove CONCATENATE_SCRIPTS, old load-scripts.php rules and deprecated calls before you update.
WordPress 7.2 drops admin script concatenation. Find and remove CONCATENATE_SCRIPTS, old load-scripts.php rules and deprecated calls before you update.
Fix the WordPress editor’s “Updating failed. The response is not a valid JSON response” error: find the cause, then fix notices, 404s, WAF, redirects.
Prime Mover 2.2.1 and older can unserialize a payload hidden in a comment. Update to 2.2.2, find planted comments with SQL, and check whether it fired.
Duplicator 1.5.17 and Pro 4.6.10 are vulnerable to object injection via comments. Update to 5.0.0, clean installers and check comments with WP-CLI.
Stolen UpdraftCentral keys are backdooring WordPress sites. Delete leftover keys, find the hidden plugins and admin users, and clean up with WP-CLI.
PHP fixed two unauthenticated RCE bugs on Oct 21, 2026. See which PHP versions are safe, how to patch and restart PHP, and the stopgaps to use meanwhile.
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.
Bricksforge 3.1.8.9 and older lets anyone upload and run PHP (CVE-2026-85097), and it’s exploited now. How to patch, block it and check if you were hit.
There are several ways you can optimize the MySQL database used by your WordPress site: Optimize tables Optimize all tables in your database: OPTIMIZE TABLE wp_posts, wp_comments, wp_options, wp_usermeta, wp_term_relationships, wp_term_taxonomy, wp_termmeta; Replace wp_ with the database prefix that you are using for your WordPress installation. Repair tables Repair any damaged tables in your database: … Read full article →