WordPress revamped with new security features

Image credit: Pixabay (Image credit: Image Credit: StockSnap / Pixabay)

WordPress is getting some much needed new security features in its latest update, WordPress 5.2, which is rolling out now to websites around the world.

The world's most popular content management system (CMS) is adding support for cryptographically-signed updates, a modern cryptography library, a Site Health section in the admin panel and White-Screen-of-Death (WSOD) protection.

Beginning with WordPress 5.2, the WordPress team will digitally sign its update packages using the ED25519 public-key signature system. This will allow a local installation to verify the update package's authenticity before applying it to a local site and can even help prevent supply-chain attacks on all WordPress sites.

Chief Development Officer at Paragon Initiatives Enterprises, Scott Arciszewski explained how WordPress 5.2 will make launching attacks against the platform more difficult for cybercriminals to ZDNet, saying:

"Before WordPress 5.2, if you wanted to infect every WordPress site on the Internet, you just had to hack [the WordPress] update server. After WordPress 5.2, you would need to pull off the same attack and somehow pilfer the signing key from the WordPress core development team."

WordPress 5.2

WordPress is aiming to improve website security with its new “Site Health” section in the admin panel's Tools menu which includes two new pages: Site Health Status and Site Health Info.

The Site Health Status page runs a set of basic security checks and delivers a report with the findings and recommendations on how to fix any issues it discovered while the Site Health Info section provides a wealth of useful information about a website and its server setup. Information is also provided about the WordPress install itself, file storage usage, plugins and themes.

The Serverhappy project is another new security feature included in the latest release of WordPress. While WordPress 5.1 included the ability to show warnings when WordPress installs were running on servers with outdated PHP versions, WordPress 5.2 includes WSOD protection that works as a safe mode for WordPress sites.

WSOD protection can temporarily disable themes and plugins when a PHP fatal error is encountered so that site admins can access their sites' backends and fix the error.

Improved security for a system used on 33.8 percent of the world's websites is certainly a welcome addition especially after Alert Logic recently discovered a vulnerability in the WP live chat plugin for WordPress that could allow attackers to upload arbitrary malicious files to vulnerable systems.

Via ZDNet

TOPICS
Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Latest in Security
An American flag flying outside the US Capitol building against a blue sky
The FCC is creating a security council to bolster US defenses against cyberattacks
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
Ransomware
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Meta warns of worrying security flaw hitting open source type software
Hand holding smartphone and scan fingerprint biometric identity for unlock her mobile phone
Biometrics add another layer of security to passwordless authentication
Data leak
Hacked Tata Technologies data leaked by ransomware gang
Latest in News
Google Gemini Flash 2.0 Images
I tried Gemini's new AI image generation tool - here are 5 ways to get the best art from Google's Flash 2.0
An image of the Samsung Galaxy S25 Ultra from a hands-on event
Samsung Galaxy S26 Ultra could resurrect an intriguing camera feature
Eurocom Raptor X18
At $15,000, this massive 256GB RAM laptop makes Apple's MacBook Pro look affordable, tiny and very, very slow
Cristin Milioti in Black Mirror season 7
Netflix launches trailer for Black Mirror season 7, giving us a look at its first-ever sequel episode and an unexpected returning character
A graphic of the PC Gaming Show
Get ready for a bounty of PC games on June 8, as the PC Gaming show is back
A close up of The Daily podcast from Pocket Casts' web page
‘Podcasting shouldn’t be locked behind walled gardens’: Pocket Casts slams Spotify and makes its web player free to all