Release announcements, threat intelligence updates, and security news from the ReportedIP team.
An unauthenticated second-order SQL injection in All-in-One WP Migration (up to 7.109) hides in trackbacks and fires on backup restore. Hive's default firewall blocks the ingress path on every plan, and a targeted trackback rule shipped today.
Read moreNine security findings closed, plugin updates restored for remote dashboards, a canonical settings registry and signed fleet management for every site you run. Everything that shipped between Hive 2.1.41 and 2.1.49.
Read moreFour months after the first release, ReportedIP Hive runs on around 100 WordPress installations, 85 of them reporting attacks to the community network daily. The HIVE50 coupon takes 50% off the first year of PRO until November 20, 2026.
Read moreTor exit-node blocking, trusted-proxy source ranges, a security widget on the WordPress dashboard and two firewall-hardening releases, everything that shipped between Hive 2.1.37 and 2.1.41.
Read moreHands-on guide to the YubiKey 5C NFC as a WordPress second factor: what the hardware key does, why FIDO2 beats one-time codes, and how our team uses this exact device to build and test Hive.
Read moreHive 2.1.36 makes hardware security keys a first-class second factor: one shared WebAuthn panel on all three sign-in surfaces, a multi-key manager with model detection, cloned-key alerts and a rebuilt profile 2FA section.
Read moreThe community-driven blacklist crossed 20,000 high-confidence threat IPs on July 27, 2026: +4,518 IPs in 30 days, with 87.7% of listed addresses attacking CMS login pages.
Read moreThe first quarterly ReportedIP WordPress Attack Report: 1.69 million attacks from 206,388 unique IPs in 82 days, the wp2shell case study, and what it means for WordPress operators.
Read moreOne category filter turns the ReportedIP blacklist into five port-scoped firewall block lists for SSH, mail, web and FTP - pulled hourly with ETag support, and fed back through fail2ban reporting.
Read morewp2shell chains two WordPress core CVEs into unauthenticated RCE. ReportedIP Hive 2.1.25 blocks the attack pattern at the WAF layer on every plan, free included.
Read moreHive 2.1.21 caps a 17-release run that hardened the new WordPress firewall: pre-WordPress WAF auto-covering nginx, backend exceptions, and a fix for auto-blocking that silently failed on non-UTC databases.
Read moreReportedIP honeypot server v1.3.0 makes webhooks configurable: post every attack detection to any API, your SIEM, Slack, Discord, or straight to AbuseIPDB.
Read more
