Connect with us

Technology

Updated Singapore Study Finds 4 in 5 Business WordPress Sites Have at Least One Detectable Vulnerability

Published

1 month ago

on

Equinet Academy analysis of 102 Singapore business websites finds one in three rated High or Critical Risk and 40.2% running outdated WordPress core versions

SINGAPORE, Sept. 15, 2026 /PRNewswire/ — Four in five WordPress websites operated by Singapore-based businesses had at least one detectable cybersecurity vulnerability, according to the Singapore WordPress Website Cybersecurity Study, published by Equinet Academy on 31 August 2026 in partnership with Cutlazz Cyber Consulting.

The study analysed 102 publicly accessible WordPress websites operated by Singapore-based businesses between April and August 2026 using passive, automated security scanning. Researchers found that 80.4% of sites had at least one detectable vulnerability, while 33.3% were rated High or Critical Risk under the study’s risk-scoring methodology. Seven websites fell into the Critical Risk category.

Across the websites analysed, researchers identified 1,853 confirmed vulnerabilities matched against documented Common Vulnerabilities and Exposures (CVEs). The average risk score across the sample was 42.1 out of 100, placing the overall cohort at the upper end of the study’s Elevated Risk category.

Outdated WordPress Software Emerges as a Major Risk Factor

One of the study’s clearest findings was the prevalence of ageing WordPress installations.

40.2% of the websites, or 41 out of 102, were running an outdated WordPress core version. Some detected installations were running versions dating back to 2015. All seven websites classified as Critical Risk were also running an outdated version of WordPress.

Plugin maintenance represented another major area of exposure. 70.6% of websites had at least one CVE-confirmed plugin vulnerability, while 65.7% had at least one outdated plugin installed. The study detected 199 outdated plugin installations across the sample.

Key findings

80.4%, or 82 of 102 websites, had at least one detectable vulnerability.1,853 confirmed vulnerabilities were matched against documented CVEs.33.3%, or 34 websites, were rated High or Critical Risk.7 websites were classified as Critical Risk.40.2%, or 41 websites, were running an outdated WordPress core.70.6%, or 72 websites, had at least one confirmed plugin vulnerability.65.7%, or 67 websites, had at least one outdated plugin installed.56.9%, or 58 websites, had XML-RPC publicly exposed.54.9%, or 56 websites, had wp-cron publicly exposed.29.4%, or 30 websites, exposed their WordPress login path through robots.txt.

Many of the Risks Are Preventable

The study found that many of the detected exposures were associated not with sophisticated attack techniques, but with routine maintenance gaps and default WordPress configurations.

Common issues included outdated WordPress installations, ageing plugins, exposed XML-RPC functionality, publicly accessible wp-cron endpoints and visible WordPress login paths.

The report notes that these exposures can often be reduced through basic measures such as keeping WordPress core and plugins updated, reviewing default configurations, restricting unnecessary public endpoints and conducting regular security scans.

“The findings show that WordPress security is not only about defending against sophisticated cyberattacks. A significant amount of exposure can come from basic maintenance issues that accumulate over time. Keeping software updated, reviewing configurations and regularly checking what is publicly exposed are practical steps businesses can take to reduce unnecessary risk.”
Dylan Sun, Founder and Managing Director, Equinet Academy

Publicly Visible Security Gaps Can Be Detected Through Automated Scanning

The research was conducted using the WPSec Automated Scanner, which analysed publicly visible information including WordPress versions, plugin inventories, known CVE exposure, header configurations and exposed WordPress endpoints.

No authenticated access was obtained. No brute-force attacks or attempts to exploit detected vulnerabilities were conducted.

The findings therefore represent a point-in-time assessment of publicly visible cybersecurity indicators, rather than a complete security audit. The presence of a vulnerability also does not confirm that a website has been actively exploited.

The study nevertheless highlights that many of these indicators are discoverable through routine automated reconnaissance, meaning similar information may also be visible to threat actors scanning publicly accessible websites.

Implications for Singapore Businesses

Where websites collect or process personal data, inadequate security controls may also create compliance exposure under Singapore’s Personal Data Protection Act (PDPA), which requires organisations to make reasonable security arrangements to protect personal data.

The report recommends that businesses prioritise HTTPS across their websites, keep WordPress core and plugins updated, disable unnecessary XML-RPC functionality, review WordPress login-path exposure, restrict unnecessary access to files and endpoints such as readme.html and wp-cron.php, and conduct security scans at least quarterly.

About the Singapore WordPress Website Cybersecurity Study

The Singapore WordPress Website Cybersecurity Study examines publicly visible cybersecurity risks affecting WordPress websites operated by Singapore-based businesses.

The study analysed 102 websites between April and August 2026. Sites were selected based on Singapore-registered domains or Singapore-hosted IP addresses, with a focus on small and medium-sized businesses. Multinational subsidiaries were excluded.

The research used passive, non-intrusive automated scanning and was published on 31 August 2026 by Equinet Academy in partnership with Cutlazz Cyber Consulting.

About Equinet Academy

Equinet Academy is a SkillsFuture Singapore Registered Training Provider that trains working professionals across digital marketing, data analytics, SEO, paid media, social media and artificial intelligence.

The Singapore WordPress Website Cybersecurity Study forms part of Equinet Academy’s commitment to producing Singapore-specific, data-backed research that supports the local business community and helps organisations make informed decisions about their digital infrastructure.

About Cutlazz

Cutlazz Pte Ltd is a global cybersecurity firm providing threat-informed defence solutions. Its services include Proactive Cyber Consulting, Virtual CISO services, Purple Teaming-as-a-Service and PCI DSS Advisory across sectors including finance, healthcare, government and technology.

The study was co-validated by Torry J. Henderson, CEO of Cutlazz Pte Ltd.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/updated-singapore-study-finds-4-in-5-business-wordpress-sites-have-at-least-one-detectable-vulnerability-302878313.html

SOURCE Equinet Academy

Related Topics:
Continue Reading

Technology

ST Engineering iDirect and MBSat Partner to Build Next-Generation Sovereign Connectivity Services Across Oman and the Middle East

Published

4 hours ago

on

October 25, 2026

By

Intuition ground system selected to support MBSat’s planned 2027 service launch, enabling accelerated deployment, dynamic resource management and scalable service growth

HERNDON, Va., Oct. 25, 2026 /PRNewswire/ — ST Engineering iDirect today announced a strategic partnership with Mohammed Al Barwani Satellite Company (MBSat), part of Mohammed Al Barwani Group, to provide the ground system technology foundation for MBSat’s next-generation satellite gateway and network operations across Oman and the wider Middle East region. Intuition will provide a flexible, software-defined foundation to support sovereign connectivity services, enabling efficient service deployment, dynamic resource management and scalable network operations.

Intuition will deliver a turnkey ground segment solution that accelerates deployment, simplifies operations and gives MBSat the flexibility to scale services as demand grows. The software-defined platform enables dynamic resource management, service automation and seamless integration with existing and future operational systems. The solution also includes Ka-band gateway infrastructure, service provisioning and management capabilities, open API integration frameworks, training and full-lifecycle support. Together, these capabilities will help MBSat launch and operate services efficiently while adapting to evolving market requirements.

The network will leverage capacity from MB Sat-1, a sovereign MicroGEO satellite, with planned service launch in 2027, to support flexible, scalable connectivity services across the region.

The partnership reflects growing investment in sovereign communications infrastructure across the Middle East as operators seek greater control over service delivery, network expansion and long-term technology evolution.

“This partnership represents an important milestone in our efforts to build an advanced satellite communications platform in Oman and the region,” said Ammar Al Rawahi, General Manager, MBSat. “Through our collaboration with ST Engineering iDirect, we are establishing the technical infrastructure required to launch services efficiently, respond to evolving customer needs and expand into new markets, supporting the sustainable long-term growth of our business.”

“We are providing MBSat with a flexible, software-defined ground platform that integrates with its existing operational environment,” said Sridhar Kuppanna, Chief Executive Officer, ST Engineering iDirect. “This enables more efficient service deployment and operations today, with the flexibility to scale, introduce new capabilities and evolve as requirements change.”

About ST Engineering iDirect

ST Engineering iDirect, a subsidiary of ST Engineering, is a global leader in satellite communications, providing technology and solutions that enable its customers to expand their business, differentiate their services and optimize their networks. Through its portfolio of ground infrastructure, intelligent networking and advanced satellite communications solutions, the company supports operators, service providers, governments and enterprises worldwide.

View original content to download multimedia:https://www.prnewswire.com/news-releases/st-engineering-idirect-and-mbsat-partner-to-build-next-generation-sovereign-connectivity-services-across-oman-and-the-middle-east-302918467.html

SOURCE ST Engineering iDirect

Continue Reading

Technology

ST Engineering iDirect and MBSat Partner to Build Next-Generation Sovereign Connectivity Services Across Oman and the Middle East

Published

4 hours ago

on

October 25, 2026

By

Intuition ground system selected to support MBSat’s planned 2027 service launch, enabling accelerated deployment, dynamic resource management and scalable service growth

HERNDON, Va., Oct. 25, 2026 /PRNewswire/ — ST Engineering iDirect today announced a strategic partnership with Mohammed Al Barwani Satellite Company (MBSat), part of Mohammed Al Barwani Group, to provide the ground system technology foundation for MBSat’s next-generation satellite gateway and network operations across Oman and the wider Middle East region. Intuition will provide a flexible, software-defined foundation to support sovereign connectivity services, enabling efficient service deployment, dynamic resource management and scalable network operations.

Intuition will deliver a turnkey ground segment solution that accelerates deployment, simplifies operations and gives MBSat the flexibility to scale services as demand grows. The software-defined platform enables dynamic resource management, service automation and seamless integration with existing and future operational systems. The solution also includes Ka-band gateway infrastructure, service provisioning and management capabilities, open API integration frameworks, training and full-lifecycle support. Together, these capabilities will help MBSat launch and operate services efficiently while adapting to evolving market requirements.

The network will leverage capacity from MB Sat-1, a sovereign MicroGEO satellite, with planned service launch in 2027, to support flexible, scalable connectivity services across the region.

The partnership reflects growing investment in sovereign communications infrastructure across the Middle East as operators seek greater control over service delivery, network expansion and long-term technology evolution.

“This partnership represents an important milestone in our efforts to build an advanced satellite communications platform in Oman and the region,” said Ammar Al Rawahi, General Manager, MBSat. “Through our collaboration with ST Engineering iDirect, we are establishing the technical infrastructure required to launch services efficiently, respond to evolving customer needs and expand into new markets, supporting the sustainable long-term growth of our business.”

“We are providing MBSat with a flexible, software-defined ground platform that integrates with its existing operational environment,” said Sridhar Kuppanna, Chief Executive Officer, ST Engineering iDirect. “This enables more efficient service deployment and operations today, with the flexibility to scale, introduce new capabilities and evolve as requirements change.”

About ST Engineering iDirect

ST Engineering iDirect, a subsidiary of ST Engineering, is a global leader in satellite communications, providing technology and solutions that enable its customers to expand their business, differentiate their services and optimize their networks. Through its portfolio of ground infrastructure, intelligent networking and advanced satellite communications solutions, the company supports operators, service providers, governments and enterprises worldwide.

View original content to download multimedia:https://www.prnewswire.com/news-releases/st-engineering-idirect-and-mbsat-partner-to-build-next-generation-sovereign-connectivity-services-across-oman-and-the-middle-east-302918467.html

SOURCE ST Engineering iDirect

Continue Reading

Technology

Global Security & Technology Summit Unveils Month-Long Program of Activities Ahead of December Event

Published

11 hours ago

on

October 24, 2026

By

RIYADH, Saudi Arabia, Oct. 24, 2026 /PRNewswire/ — The Organizing Committee of the Global Security & Technology Summit (GSTS) held an introductory session today at the Ministry of Interior’s headquarters in Riyadh, bringing together representatives from the government, private, and nonprofit sectors to introduce the program of activities leading up to the summit. The upcoming summit will be held in Riyadh under the patronage of HRH Prince Mohammed bin Salman bin Abdulaziz Al Saud, Crown Prince and Prime Minister, under the supervision of HRH Prince Abdulaziz bin Saud bin Naif bin Abdulaziz Al Saud, Minister of Interior, and organized by the Ministry of Interior in cooperation with Tuwaiq Academy.

During the session, the Organizing Committee presented the comprehensive GSTS program, comprising three key components: GSTS Month, running from November 1 to 30, 2026; the Global Security & Innovation Fair (SAIF), taking place from November 24 to 26, 2026; and the main Summit, scheduled for December 18 to 20, 2026, in Riyadh. Together, these events form an integrated program designed to advance security and technology innovation, strengthen national capabilities, and foster international cooperation.

GSTS Month will feature working groups, boot camps, training programs, knowledge-sharing sessions, and technical workshops across Saudi Arabia’s 13 administrative regions, delivered both in person and remotely in collaboration with specialized entities. The month-long program aims to develop national capabilities, identify emerging talent, enrich knowledge-sharing opportunities, and equip professionals with the knowledge and skills needed to develop innovative solutions to future security and technology challenges.

The main Summit will bring together global leaders, decision-makers, experts, and innovators to explore the future of security and technology, promote the integration of advanced technologies within the security sector, strengthen national capabilities, support innovation, and foster international cooperation, further positioning the Kingdom as a global hub for security and technology.

Showcasing the latest technological breakthroughs and security solutions, the summit will bring together government entities, private sector organizations, academic institutions, and research centers to facilitate knowledge exchange and collaboration across key fields, including cybersecurity, artificial intelligence (AI), the Internet of Things (IoT), smart security solutions, emerging technologies, and crisis management. The program will also feature main sessions, specialized discussions, and interactive exhibitions. Registration is available at gsts.sa.

Advisor to HRH the Minister of Interior and Chairman of the GSTS Organizing Committee, Ahmed Altowayan, stated that the summit builds on Saudi Arabia’s efforts to establish an advanced security and technology ecosystem focused on knowledge and innovation, keeping pace with rapid developments and future challenges.

Mr. Altowayan noted that the summit is a global platform for strengthening cooperation and exchanging expertise, anticipating future developments in security and technology, and developing strategic partnerships and innovative solutions that enhance the efficiency and readiness of security systems.

Vice Chairman of the GSTS Organizing Committee, Eng. Abdulaziz Alhammadi, said that the summit will offer a range of integrated programs and activities focused on enhancing national skills, encouraging innovation, and supporting international cooperation.

He added that GSTS Month will help build national capabilities, discover talent, and develop skills, with SAIF providing a platform for innovators and researchers from around the world to showcase leading technological solutions, while the main Summit will bring together leaders and experts to discuss the future of security and technology and explore new strategic partnership opportunities.

SAIF will take place at the Riyadh International Convention & Exhibition Center, bringing together innovators, researchers, technology talents, and industry experts from around the world to showcase promising innovations and projects across 14 fields of technology and innovation. The fair will provide opportunities to engage with project owners, including students, graduates, and entrepreneurs, and explore the different stages of innovation development through interactive zones, panel discussions on emerging security and innovation trends, and knowledge-sharing workshops led by specialists. Visitor registration is open to participants from within and outside the Kingdom through saifair.sa.

The introductory session also featured contributions from representatives of government, private, and nonprofit sector entities, alongside members of the media. Discussions focused on developing national capabilities in security and technology, strengthening students’ technical expertise, translating scientific research into practical solutions, and supporting Saudi companies in developing security and technology solutions and advancing digital transformation.

Organized by the Ministry of Interior in cooperation with Tuwaiq Academy, GSTS is produced by Tahaluf, with the Ministry of Education serving as Strategic Scientific Partner, Tahakom as Founding Partner, and Elm as Principal Partner.

Registration for participants from within and outside the Kingdom is available at gsts.sa.

Click here to view the media kit. 

View original content to download multimedia:https://www.prnewswire.co.uk/news-releases/global-security–technology-summit-unveils-month-long-program-of-activities-ahead-of-december-event-302918695.html

Continue Reading

Trending