Tessera

Relvato

@relvato.com

Continuous website monitoring — we re-run your checkout, login and signup in a real browser every time your site changes, and ping you the second one breaks. WordPress · WooCommerce · Lovable / Bolt / v0 Free tier, no card → relvato.com

7 Posts2 Follower 15 Folgt

Relvato @relvato.com · 5d ago

WordPress's bug bounty got 20–30 security reports a month for a decade. July 2026: 450. August: 773, as researchers pointed AI at it. You don't set your update pace anymore. The real work is checking each update didn't break checkout. www.relvato.com/platforms/wo... #WordPress

WordPress got ~25 security reports a month for a decade. In August: 773.

For about ten years, WordPress's bug-bounty program received 20–30 security reports a month. In July 2026 it got 450. In August, 773, after researchers started pointing AI models at WordPress (via The Repository).

It isn't only volume:
• In May, TrendAI and CHT Security used AI to find 300+ critical zero-days in WordPress plugins in 72 hours, at roughly $20 per vulnerability.
• Patchstack counted 11,334 new WordPress vulnerabilities in 2025, up 42% on 2024. 91% were in plugins.
• Click2Shell, found with Claude Opus 5 and a human researcher: one link opened by a signed-in admin could install a theme from the official directory and run its code. Fixed in WordPress 7.1.1.

What it means if you run WordPress sites:
→ You no longer set your update pace. Disclosures do, and skipping a security release is the bigger risk.
→ The hard part moves from patching to verifying. An update can shift a selector, move a button or break checkout, and nobody tests it on your setup.
→ So after each update, re-check what earns money: checkout, login, payments, order emails.

We built Relvato to run that re-check automatically after every update. Sources and more context:
https://www.relvato.com/platforms/wordpress?utm_source=linkedin&utm_medium=social&utm_campaign=weekly

#WordPress #WebSecurity #WooCommerce #WebDevelopment

Relvato @relvato.com · 2w ago

AI made writing code dramatically faster. It did not make code more correct. A model that is fluent, confident and wrong breaks things that used to work — and it doesn't hesitate or leave a TODO while doing it.

Relvato @relvato.com · 4w ago

Six ways a WooCommerce checkout breaks while uptime says 100%: — gateway credentials expire — plugin update drops a noindex — SMTP dies, resets stop arriving — a payment method disables itself — stock sync breaks — cart drops on mobile The server answers 200 throughout.