Security Notes.

When something happens that affects how safe ordinary business websites are, we write about it here. Plainly, with sources, without the scare tactics. Where relevant, we explain what it means for a site managed under Keep.

28 Jul 2026

wp2shell: WordPress Core Vulnerability

A critical bug in WordPress core let anonymous attackers run code on unpatched sites, no plugins required. Why static sites were never exposed.

Read more →

Want a second opinion on your site?

If something you've read here made you wonder about your own website, that's a reasonable thing to check.

Get a Website Check →