Kingswood Digital

09/16/2026

A small plugin can create a serious risk for your online store.

Attackers are actively exploiting a vulnerability in WooCommerce Wholesale Lead Capture, a third-party WordPress plugin that could let them upload malicious files and take control of an affected site.

Using this plugin? Here’s what to do:

• Check your version. Versions 2.0.3.1 and earlier are affected.
• Update to the latest patched release. The security fix was introduced in 2.0.3.2.
• Have your site checked for signs of compromise. An update won’t remove an existing backdoor.

This is why ongoing website care matters. Updates, monitoring and reliable backups all play a role in protecting the business behind your website.

At Kingswood Digital, we handle managed WordPress care so you can focus on running your business.

Need help keeping your site maintained and monitored? Talk to Kingswood Digital.

Read the full BleepingComputer report.

https://www.bleepingcomputer.com/news/security/hackers-target-wordpress-sites-via-third-party-woocommerce-plugin/

08/12/2026

WordPress 7.0.4 is out — and every site we manage is already on it.

This one's serious: it patches an authenticated remote code ex*****on flaw. In plain terms, a logged-in Author-level user on a vulnerable site could upload a crafted file and run their own code on the server. If your site allows contributor or author registration — membership sites, multi-author blogs, communities — that's your exposure. The fix reaches back nearly a decade of WordPress versions.

Here's the part worth sitting with: the flaw was found by an AI security firm (pwn.ai)—the second WordPress release in a row where AI surfaced a critical bug. The same models attackers can point at your site are now finding and weaponizing vulnerabilities in hours, not weeks. The old "we'll patch at the next maintenance window" approach was built for a slower world.

That's the whole point of managed care: your site is patched, monitored, and backed up before most people have even read the release notes.

👉 Book a free 30-minute strategy call — no pitch, no pressure. kingswooddigital.com

08/09/2026

🚨 Heads-up for anyone running BDThemes Elementor add-ons (Element Pack, Prime Slider, and the rest): Wordfence has disclosed a supply-chain compromise in the BDThemes ecosystem, delivered through a poisoned API response.

⚠️ The important part — this isn't a "you forgot to update" problem. A manipulated response from the vendor's own service can reach fully updated sites. If you use these plugins, review Wordfence's advisory, scan your site, and check for unfamiliar admin accounts.

Full details → https://www.wordfence.com/blog/2026/08/psa-supply-chain-compromise-in-bdthemes-ecosystem-via-poisoned-api-response/

✅ Want us to check your site? → kingswooddigital.com/contact

08/07/2026

Most business owners have enough on their plate without worrying about whether their WordPress site is secure. 🔐

WordPress 7.0.3 recently patched 12 security vulnerabilities — and every site on our Managed WordPress Care plan was updated the same day.
No chasing updates. No wondering what’s been missed. No extra task on your list.

We keep an eye on the technical side so you can focus on running your business.

If you’re not sure who’s actively looking after your WordPress site, we’d be happy to chat.

👉 Book a free strategy call at https://hubs.ly/Q04sc3_z0

08/06/2026

🚀 New Website Launch!

We’re excited to celebrate the launch of the new website for OT Rx!

Our goal was to create a polished, welcoming digital experience that reflects their brand while making it easier for patients to explore their telehealth services, learn about available treatment options, and take the next step toward care.

The completed website features a modern, mobile-responsive design, streamlined navigation, clear appointment-focused calls to action, and a stronger overall presentation across desktop and mobile devices.

Thank you to the OT Rx Health team for trusting Kingswood Digital to bring this project to life. We’re proud of the final result and excited to see the website support their continued growth!

🌐 Explore the new website: https://hubs.ly/Q04rWykL0

07/20/2026

🚨 Remember that critical WordPress security update we warned you about last week? Here’s why it was such a big deal.

Security researchers have dubbed the flaw "wp2shell"—marking the first critical, unauthenticated WordPress Core Remote Code Ex*****on (RCE) vulnerability in nearly a decade.

What does that mean in plain English?

Without needing a username or password, attackers could execute unauthorized code and potentially gain complete control of an unpatched website.

wp2shell is a critical unauthenticated RCE chain in WordPress Core, patched July 17, 2026. See who's affected, the exploitation timeline, and what to do now.

07/18/2026

Yesterday, we shared an update about two recently disclosed WordPress vulnerabilities—one rated critical and the other high severity—that could allow attackers to gain unauthorized access and remotely execute code on vulnerable websites.

Wordfence has published a detailed breakdown of how these vulnerabilities can be chained together and exploited. You can read their full analysis here:

On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to unauthe...

07/18/2026

⚠️ Critical WordPress Security Update

WordPress released an urgent security update on July 17 addressing two serious vulnerabilities within WordPress Core:

🔴 A critical remote code ex*****on vulnerability rated 9.8 out of 10, which could potentially allow an attacker to execute unauthorized code on an affected server.

🟠 A high-severity SQL injection vulnerability rated 7.5 out of 10, which could potentially allow an unauthenticated attacker to access sensitive information from a website’s database.

Affected websites should be updated immediately to an appropriate patched release:

• WordPress 7.0.2 or newer
• WordPress 6.9.5 or newer
• WordPress 6.8.6 or newer

Website owners should also verify that the update completed successfully, test important website functionality, maintain a current backup, and continue monitoring the site for unusual activity.

For Kingswood Digital clients, this is already being handled.

We promptly reviewed our managed websites, identified those requiring action, and deployed the appropriate security updates. Our clients did not have to discover the vulnerability, determine whether they were affected, or navigate the update process themselves.

That is the value of proactive website management: critical maintenance happens when it is needed—not weeks or months later when something breaks.

Not sure whether your WordPress website is protected? Check your current WordPress version or reach out to have your website reviewed.

07/10/2026

We had a blast partnering with the team at Drop In RC Tire Washer to completely rebuild and relaunch their online store! 🚀

The new site is officially live and packed with awesome upgrades to make getting your gear easier than ever, including:

🔹 More payment options for a smoother checkout.
🔹 Enhanced product descriptions and crisp new graphics.
🔹 Real-time inventory updates (all washer models are currently in stock!).

Check out their announcement below and head over to their new digital home to see the upgrade! 🏁💻

Clean dirty 1/10 and 1/8 RC racing tires in seconds with the Drop-In RC Tire Washer. Fast, motorized, tire cleaning built for dirt and off-road racers.

06/23/2026

Your website isn’t “set it and forget it.”

Outdated plugins, broken forms, slow pages, and security gaps can quietly cost you leads, trust, and revenue.

Regular website maintenance helps keep your site secure, backed up, monitored, and working the way it should.

Need peace of mind? Message Kingswood Digital for a free website maintenance consultation.