Fixes need to happen fast
Security firm Patchstack recorded 11,334 new vulnerabilities across the WordPress ecosystem in 2025, up 42% on 2024. Almost all were in plugins and themes, with just six in WordPress core itself. The most heavily targeted flaws are typically attacked within hours of going public, not days.
We keep your core software, plugins and themes updated, with a web application firewall and malware scanning protecting your site in between updates.
Source: Patchstack, State of WordPress Security in 2026



