SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

WordPress Plugin Vulnerabilities Hit Record High in 2025, Abandoned Code a Key Risk

0
·1 views

A Patchstack report reveals that 11,334 WordPress vulnerabilities were disclosed in 2025, a 42% rise from the previous year and the highest figure ever recorded. Plugins accounted for 91% of these vulnerabilities, while WordPress core itself had only six low-severity issues. Nearly half of the disclosed vulnerabilities had no developer patch available at the time of public disclosure, up from 33% the year before. A leading cause is abandoned or deprecated plugins, where developers stop issuing security updates, leaving sites silently exposed to known exploits. Security experts are urging agencies to adopt quarterly software audits to track plugin ownership, update history, and license status across client websites.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Student Reviews Tencent EdgeOne Makers as Practical Tool for Secure Web Deployment

A Computer Systems and Networking student shared their experience using Tencent EdgeOne Makers, accessed through the DevHandal 2026 Batch 2 program, for deploying academic web projects. The platform streamlined the deployment process by automatically issuing SSL/TLS certificates, routing traffic through global edge nodes, and providing built-in Web Application Firewall and DDoS protection. The student noted significant improvements in page load speeds when multiple users accessed the application simultaneously, thanks to distributed delivery of static assets. Edge Functions on the platform also allowed the student to experiment with serverless concepts such as URL redirection and token validation without burdening the origin server. Additionally, the program offered access to up to 5 million LLM API tokens, enabling students to explore AI integrations in web projects at no upfront infrastructure cost.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Mistral AI Launches Regional Inference Endpoints, Open Model Support, and European Compute Plan

Mistral AI announced on August 11, 2026, a multi-part expansion of its AI platform covering regional inference, third-party model support, and a long-term European compute initiative. The company introduced dedicated endpoints for EU and US inference — api.eu.mistral.ai and api.us.mistral.ai — allowing customers to route data processing by region, though at an additional cost. Mistral also plans to host third-party open-weight models on its platform alongside its own, beginning with GLM-5.2 from Z AI, enabling model flexibility without requiring separate infrastructure stacks. A new SLA-backed Priority Tier has been introduced for mission-critical workloads that require guaranteed capacity commitments. Additionally, Mistral outlined intentions to build a European compute coalition through multi-year enterprise commitments, though this represents a forward-looking plan rather than immediately available capacity.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Your Guitar Sounds Off Even After Perfect Tuning: Equal Temperament Explained

Digital tuners rely on equal temperament, which divides an octave into twelve precisely equal 100-cent steps, allowing instruments to play in any key without retuning. The human ear, however, perceives intervals as pure when their frequencies form simple whole-number ratios, such as 3:2 for a perfect fifth or 5:4 for a major third. These pure ratios do not align with equal-tempered pitches, creating measurable gaps — most notably, the major third is 13.7 cents sharp and the minor seventh nearly 18 cents sharp. While the ear can detect deviations as small as 5 cents, perfect fifths and fourths deviate by only about 2 cents and largely go unnoticed, whereas thirds and sixths produce the faint audible beating many listeners sense in held chords. Equal temperament is therefore a deliberate mathematical compromise that distributes tuning error evenly across all keys, sacrificing pure intervals for universal playability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

TLS Everywhere Claims Often Hide Plaintext Gaps Inside Kubernetes Clusters

Many systems that claim full TLS encryption only secure traffic at the edge, leaving internal communications — such as ingress-to-pod, pod-to-pod, and application-to-database connections — unencrypted by default. In Kubernetes environments, ingress controllers like NGINX and Traefik terminate TLS at the boundary and forward plain HTTP to backend pods unless explicitly reconfigured for re-encryption. Database connections on platforms like RDS also default to plaintext unless connection strings explicitly include parameters such as sslmode=require or Encrypt=True. A further risk lies in cluster infrastructure certificates, which expire annually by default in kubeadm setups with no automated renewal, potentially causing a full cluster outage if missed. Closing these gaps can be achieved through targeted measures like backend re-encryption annotations and automated certificate management tools, without necessarily deploying a full service mesh.

0 comments Read more at DEV Community