WordPress Security 2026: Leaks, backdoors and why maintenance is crucial
WordPress is the world’s most widely used content management system – and that is precisely why it is a prime target for attackers. The biggest vulnerability does not lie in the core system itself, but in plugins.
Current figures show that around 96% of all security vulnerabilities are caused by plugins. At the same time, the number of vulnerabilities continues to rise – in 2025 alone, over 11,000 new security vulnerabilities were discovered in the WordPress ecosystem.