2024 Annual WordPress Security Report by Wordfence

The Wordfence 2024 Annual WordPress Vulnerability and Threat Report provides a comprehensive analysis of 8,223 disclosed vulnerabilities (68% increase year-over-year), attack telemetry (tens of billions of blocked malicious requests and password attacks), and malware prevalence (~1M distinct infected sites), highlighting that most disclosures were medium-severity and contributor-level but a meaningful subset (≈7–7.5%) were high‑threat (RCE, arbitrary file upload, privilege escalation). The report documents active exploitation attempts (e.g., LiteSpeed Cache, WP Meta SEO, supply‑chain plugin compromises), outlines attacker TTPs and high‑value incidents, and recommends layered defenses, rapid patching, and developer security practices.