skinny.

Latest / Wpfavs - Your favourite WordPress news

Five Hours to Exploitation: Rethinking WordPress Security

New 2026 security data points to a dangerous gap: heavily exploited WordPress vulnerabilities can reach mass exploitation in a median of five hours, while nearly half are disclosed before a patch exists. We examine why hosts and update schedules aren’t enough, how persistent malware and AI-powered site access change the threat model, and what agencies can do now—from virtual patching and least privilege to stricter plugin vetting.

The skinny

The skinny isn't ready yet — notes appear once the transcript is processed.