MonitorWWW Blog
Practical guides on website monitoring, uptime, WordPress security and WooCommerce — written by a team that fights fires for clients every day.
WordPress 7.1.4 Security Release: 21 Vulnerabilities Fixed
WordPress 7.1.4 patches 21 vulnerabilities from version 7.1.2 and earlier. See the list of flaws and how to update safely.
Read more → 2026-10-29 · 7 min min readWordPress 7.1.4 – 22 Vulnerabilities Fixed, Including an RCE Flaw in the Update Process
WordPress 7.1.4 patches 22 vulnerabilities: a race condition in core updates (RCE), many XSS flaws including ones in the Interactivity API, and a leak of unpublished Customizer changes. Here is what was fixed and which versions are safe.
Read more → 2026-10-28 · 5 min min readBricksforge (CVE-2026-85097): Critical WordPress Plugin Flaw Is Under Attack
Bricksforge 3.1.8.9 and older lets anyone upload a PHP file to the server without logging in. Attacks have been running since October 7. Here is how the flaw works, how to patch it and how to check whether someone got in.
Read more → 2026-10-28 · 6 min min readThe "SC" WordPress Backdoor Rebuilds Itself After Cleanup: Where It Hides and How to Remove It
Sucuri described malware that hides in files, the database and shared memory, and rebuilds itself from any of them. Removing one part does not help. Here is where to look and how to clean everything at once.
Read more → 2026-10-21 · 6 min min readCritical PHP RCE Flaws (CVE-2026-109618 and CVE-2026-109619): Patches Out, Attacks Ongoing
PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are out, and attacks on the two critical RCE flaws have been running since October 17. Here is how to verify your PHP version, what to do if you cannot update, and how to spot a break-in.
Read more → 2026-10-10 · 6 min min readWordPress 7.1 – 19 Vulnerabilities in Three Releases, Including a Critical RCE (CVE-2026-87902)
WordPress 7.1.1, 7.1.2 and 7.1.3 are three security releases in under three weeks, patching 19 flaws in total — one of them critical and exploitable without logging in. Here's what got fixed and why only 7.1.3 is safe.
Read more → 2026-08-13 · 5 min min readWordPress 7.0.3 – Critical RCE Vulnerability (CVE-2026-65640) Fixed in 7.0.4
WordPress 7.0.4 patches a critical remote code execution flaw in 7.0.3, reachable by logged-in Authors on sites using Imagick and Ghostscript. Here's what the vulnerability is and how to protect your site.
Read more → 2026-08-07 · 5 min min readWordPress 7.0.2 – 9 Security Vulnerabilities Fixed in 7.0.3
WordPress 7.0.3 patches nine security vulnerabilities in 7.0.2 — two of them exploitable without any login. Here's exactly what got fixed and why this update shouldn't wait.
Read more → 2026-07-30 · 7 min min readHow to Detect Malware on Your WordPress Site Before Google Does
Injected code, a hidden backdoor, or spammy redirects — a WordPress infection is often invisible to the naked eye. Here's what malware actually looks like and how to catch it before your customers or the search engine do.
Read more → 2026-07-30 · 5 min min readCritical WordPress Vulnerabilities (CVE) — New in Monitoring
"Outdated WordPress version" and "known, documented security flaw with a CVE number" are two very different threat levels. Here's how we now check your installed core version directly against the vulnerability database.
Read more → 2026-06-10 · 6 min min readHow to Check If a Website Is Down: 5 Methods
A site won't load and you don't know if it's just you or every visitor? Here are 5 ways to quickly diagnose the problem — from a manual check to 24/7 automated monitoring.
Read more → 2026-06-10 · 7 min min readWhat Is Uptime and Why Does It Matter for SEO?
Uptime isn't just a technical metric for the IT team. Downtime affects Google rankings, user trust and sales. Here's how uptime is calculated and why it matters for SEO.
Read more → 2026-06-10 · 8 min min readWordPress Site Down at Night? What to Do
A white screen, a 500 error, or a database connection error — at 3 a.m. of course. Step by step: what to check, how to fix the basics, and how to prevent it next time.
Read more → 2026-06-10 · 7 min min readWooCommerce Monitoring: Why Jetpack Alone Isn't Enough
Jetpack will happily report a 200 OK on your homepage even while checkout and payments are completely broken. Here is what free WooCommerce monitoring is missing.
Read more →An alert when WordPress patches security flaws
One email on the day a WordPress security release reaches the vulnerability database — with the list of flaws and the version to update to. No other messages.
Subscription requires confirmation via an emailed link. You can unsubscribe with one click. Details in the privacy policy.