Top all-time · #6657
Patchstack
Company blog · patchstack.com/articlessecurity
Patchstack is the company blog at patchstack.com, writing about security. Since 2021, 11 different Hacker News readers have linked it 28 times, most often “Whitepaper: WordPress Security in 2021”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers link Patchstack's pages as sources for WordPress security vulnerability details, plugin advisories, and the state of WordPress security. The comments cite the pages without judging the writing.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Keep your WordPress sites and JavaScript apps safe from vulnerable plugins, themes & npm packages. Protect sites with virtual patching.
Most-linked posts?
- Whitepaper: WordPress Security in 20212 people · 2 mentions · first linked 2022-03-09
- $14.4K bounty paid for WordPress plugin vulnerability2 people · 2 mentions · first linked 2024-08-21
- Fake CVE Phishing Campaign Tricks WordPress Users into Installing Malware2 people · 2 mentions · first linked 2023-12-04
What Hacker News says?
> Since most people don't seem to be aware: you can use Wordpress as a mostly-static website generator. > Use WP Super Cache, and most of your pages are static anyway. This isn't "static" in the sense of a static site generator because your web server is still running code, reading/writing files, sending SQL queries, interpreting URL query parameters (e.g. for search results pages) and injecting data into templates…
Comment linking /database/vulnerability/wp-super-cache
on “WordPress themes, plugins backdoored in supply chain attack”Submitted Malware found in official gravityforms plugin indicating supply chain breach as a story · 235 points
HN discussionHere's also a blog post with more details: https://patchstack.com/hiring-full-stack-php-developer/
Comment linking /hiring-full-stack-php-developer/
on “Ask HN: Who is hiring? (September 2021)”Submitted Critical RCE patched in Imunify360 affects up to 50M+ websites as a story · 7 points
HN discussionI’m the CEO of Patchstack. We don’t accept vulnerabilities in our program that require admin privileges (even though there have been real cases where such vulnerabilities cause serious damage to multisite networks). The plugin vulnerability issues in WordPress have become significantly worse, as low severity issues are now chained together that become a severe issue. On top of that, these vulnerabilities are being e…
Comment linking /articles/myth-of-secure-hosting-only-26-percent-of-vulnerability-exploits-blocked-by-hosts/
on “Matt Mullenweg tells Automattic staff in Slack he's back in control after ouster”Submitted Stolen UpdraftCentral Keys Are Backdooring WordPress Sites as a story · 3 points
HN discussionHere are full details of that vulnerability: https://patchstack.com/hide-my-wp-vulnerabilities-fixed/
Comment linking /hide-my-wp-vulnerabilities-fixed/
on “WordPress security plugin Hide My WP addresses SQL injection, deactivation flaws”Submitted Web hosts struggle to protect against WordPress vulnerabilities as a story · 3 points
HN discussion> Video games are now ruined for me. I don't think I will ever feel safe playing online again. Agreed, also WordPress powers around 43% of all websites on the internet. https://patchstack.com/whitepaper/state-of-wordpress-securit... WCGW?
Comment linking /whitepaper/state-of-wordpress-security-in-2026/
on “Responding to the next frontier of critical cyber capabilities”Submitted State of WordPress Security in 2025 as a story · 3 points
HN discussionAll the vulnerabilities will be published here: https://patchstack.com/database/
Comment linking /database/
on “Nearly 1000 Plugins Closed During WordPress Security Cleanup”Submitted Nearly 1000 Plugins Closed During WordPress Security Cleanup as a story · 3 points
HN discussionhttps://patchstack.com/articles/critical-vulnerability-fixed...
Comment linking /articles/critical-vulnerability-fixed-in-essential-addons-for-elementor-plugin/
on “Serious Vulnerability in WordPress Plugin Essential Addons for Elementor”Submitted Polyfill Vulnerability Effect on the WordPress Ecosystem as a story · 3 points
HN discussionSubmitted State of WordPress Security in 2021 as a story · 3 points
HN discussionSubmitted Whitepaper: WordPress Security in 2021 as a story · 3 points
HN discussionSubmitted $14.4K bounty paid for WordPress plugin vulnerability as a story · 2 points
HN discussionSubmitted Entire WordPress Source Code Leaked as a story · 2 points
HN discussionSubmitted ChatGPT Writing Insecure Code as a story · 2 points
HN discussionSubmitted Critical security vulnerability fixed in Elementor (5M+ WordPress Installs) as a story · 2 points
HN discussionSubmitted Patchstack announced free plan to detect WordPress security vulnerabilities as a story · 2 points
HN discussionSubmitted Critical Supply Chain Compromise on 20 Plugins by EssentialPlugin as a story · 1 points
HN discussionSubmitted Critical Privilege Escalation: LiteSpeed Cache Plugin Affecting 5M Sites as a story · 1 points
HN discussionSubmitted The State of WordPress Security 2024 as a story · 1 points
HN discussionSubmitted Fake CVE Phishing Campaign Tricks WordPress Users into Installing Malware as a story · 1 points
HN discussionSubmitted Fake CVE Phishing Campaign Tricks WordPress Users into Installing Malware as a story · 1 points
HN discussionSubmitted PHP Object Injection via Insecure Instantiation as a story · 1 points
HN discussionSubmitted Log4j attacks everywhere – even against WordPress sites as a story · 1 points
HN discussion
