WordPress 7.1.4 (Oct 28) fixes a core upgrade-process flaw that can lead to remote code execution, plus stored XSS bugs. Patchstack counts 22. Check Dashboard > Updates shows 7.1.4 today and update by hand if not. wordpress.org/news/2026/10/w…
WP Ghost 9.1.08 is out (28 Oct). It can throttle AI training crawler bots so a crawl spike cannot exhaust the server, configurable on the 2026 Ghost Firewall. Update from Plugins > Updates. wpghost.com/kb/changelog/
2026 Ghost Firewall covers the full range of how a WordPress site is probed and exploited, at the edge and inside the request:
wpghost.com/kb/2026-ghost-fi…
#firewall #WordPressSecurity #hidemywp
YOOtheme Pro 5.0.0 to 5.0.52 on WordPress: CVE-2026-102785, an unauthenticated file upload, is being exploited (Unit 42, Wordfence). The theme doesn't auto-update. Install 5.0.53 and check wp-content/uploads for .php files you don't know. wordfence.com/threat-intel/v…
DreamHost has been expiring some email and FTP/SFTP passwords since Oct 23, cause not named. WordPress on DreamHost: set new SFTP passwords under Websites > SFTP Users & Files and remove mail forwards you don't know. help.dreamhost.com/hc/en-us/…
WP Ghost 9.1.06 is out (26 Oct) with the 9G Firewall, the new firewall generation. It covers admin-ajax and the REST API, file uploads too. Update from Plugins > Updates. wpghost.com/kb/changelog/
Beginner guide, under 3 minutes: install WP Ghost, load one preset, run Ghost Doctor, set the 8G Firewall. Your login gets a new address and wp-login.php returns a 404. youtu.be/HQl8p1X5mIg
WP Ghost 9.1.03 update: test your reCAPTCHA keys right on the Brute Force page, without logging out.
Plus firewall hardening so a forged login cookie can no longer skip it, and a fix for Temporary and Magic Login on PHP 8. Update from your plugins page.
#WordPress #Security
wpghost.com/kb/wp-ghost-9-1/
WP Ghost 9.1 adds Ghost Doctor, a diagnostic layer that inspects your server rules, cache and theme, explains what is broken in plain language, and repairs most of it in one click with an Undo.
#WPGhost #release #wordpressplugin #WordPressSecurity








