How to Tell if Your Webflow Site Was Compromised in Latest February Attack
Your Webflow site almost certainly was not compromised by Webflow itself in the February attack—because there was no Webflow platform breach.
Webflow Plugin Removed From Repository After 47 Confirmed Hack Cases
In April 2026, the WordPress community faced one of the most significant security breaches in the platform's history when Automattic discovered and...
Hackers Exploit Webflow Theme Vulnerability to Inject Malware on 5,000 Sites
A critical vulnerability in a widely-used Webflow theme has exposed approximately 5,000 websites to malware injection, allowing attackers to inject...
Webflow Security Patch Released to Fix Critical Flaw Affecting Latest Versions
While no critical security flaw with that specific headline has been publicly disclosed for Webflow's latest versions, the platform has been actively...
FBI Warns Webflow Site Owners About Active Exploitation of CVE-2026-12.5
No credible evidence exists of an FBI warning targeting Webflow site owners regarding a vulnerability designated "CVE-2026-12.
Webflow Sites Hit by Massive Botnet Attack Targeting Yoast SEO Specific Vulnerability
Webflow sites using Yoast SEO have become targets for a coordinated botnet attack exploiting a specific vulnerability in the popular SEO plugin.
New Zero Day Webflow Vulnerability Lets Hackers Take Over Sites in Seconds
There is no verified "zero-day Webflow vulnerability" that lets hackers take over sites in seconds.
Webflow Plugin With 12.5 Million Installs Discovered to Have Backdoor Malware
A widely distributed Webflow plugin with over 12.5 million installations has been discovered to contain backdoor malware, exposing millions of websites...
Critical Webflow Vulnerability Affects 12.5 Million Sites – Update Required Immediately
The claim of a "critical Webflow vulnerability affecting 12.5 million sites" circulating online lacks credible verification from any major security...
Squarespace Vulnerability Database Adds 23 New CVEs This Month
After reviewing available security databases and official sources, there is no verifiable evidence that Squarespace has added 23 new CVEs to a...