Melapress publishes reporting and resources in the Security section of WPURLs.
In This Episode In this episode, we welcome Austin Ginder, developer and owner of Anchor Hosting, a WordPress hosting and management service. Austin manages around 3,000 WordPress sites largely on his own, and that scale led him to uncover a series of previously undetected…
We’re excited to announce that WP 2FA 4.0.0 is now available, introducing a brand-new user interface for the plugin. This release gives WP 2FA a cleaner, more modern user experience, with improvements across the setup wizard, plugin settings, navigation, and day-to-day…
In This Episode In this episode, we speak with Mat Rollings, a security researcher and bug bounty hunter who has uncovered hundreds of WordPress vulnerabilities. We dig into a vulnerability class Mat calls Regexss, where regular expressions are used to manipulate…
In This Episode In this episode, we spoke with Dan Knauss about WordPress security in enterprise environments. The conversation focused on what companies actually worry about when using WordPress and how security decisions are made in real projects. We also explored the gap…
In This Episode In this episode, we sit down with Francesco Carlucci, a cybersecurity consultant, bug bounty hunter, and author of The Hacker Mindset, to explore how vulnerabilities in WordPress are actually discovered and exploited. The conversation focuses on a simple but…
In This Episode When a client says, “I think we’ve been hacked,” panic is often the first reaction. In this episode, WordPress security consultant Tim Nash walks through what actually matters in that moment and what does not. Drawing on decades of real-world experience, Tim…
In This Episode WordPress security is no longer just a technical best practice, it is becoming a legal requirement. In this episode of the Melapress Live Show, Robert Abela sits down with Oliver Sild, CEO of Patchstack, to discuss the EU Cyber Resilience Act (CRA) and what it…
In This Episode When a WordPress site gets hacked, most people focus on one thing: removing the malware. But as Francesco Carlucci explains in this episode of the Melapress Show, removing the malware is only a small part of the cleanup process. In this conversation, we explore…
In This Episode Passwords have been the default authentication method for decades, and they remain one of the most commonly exploited weaknesses in WordPress. Passkeys have emerged as a promising alternative, offering phishing resistance, simpler logins, and stronger protection…
Website defacement refers to unauthorized changes made to the publicly visible part of your website. It’s like someone sneaking in to redecorate your homepage or slipping in spammy links where you wouldn’t notice. Defacement can impact your search rankings or brand, and can…
