Kinsta, a leading managed hosting provider for WordPress, today announced Vulnerability Protection, powered by Patchstack, a new security layer that automatically protects every Kinsta WordPress site against known plugin and theme vulnerabilities at no extra cost. Websites are protected as soon as a vulnerability is detected, even if a fix is not yet available.
WordPress vulnerabilities are a growing problem, with vulnerabilities rising 42% in 2025, and 46% of those disclosed had no vendor fix at the time, according to Patchstack’s State of WordPress Security in 2026 report. A compromise can mean lost orders, damaged business reputation and exposed customer data.
“AI has dramatically increased how quickly hackers can find and exploit vulnerabilities in software,” said Daniel Pataki, CTO at Kinsta. “Application-level issues have traditionally not been addressed by hosts, but we believe stability and security of a site is essential and lets a business focus on growth. We see this as an investment in our customers’ experience.”
Kinsta’s Vulnerability Protection identifies vulnerabilities in a site’s software and applies a protection at the WordPress application layer. Vulnerability Protection continuously checks the plugins, themes and WordPress version running on each site against known vulnerabilities. If it finds one, it applies a personalized firewall, with no changes to site code and no dashboards or vulnerability feeds for customers to monitor. This keeps the site protected until the software can be safely updated.
Within the first weeks, Patchstack has blocked more than 1.5 million exploitation attempts across more than 68,000 Kinsta sites.
“With the recent avalanche of vulnerability discoveries combined with the increasing speed of vulnerability weaponization, fast mitigation is non-negotiable for businesses of any size,” said Oliver Sild, CEO of Patchstack. “Kinsta has made a major investment in its customers’ security and made a premium security solution available to everyone at no extra cost.”
Patchstack’s report found 11,334 new WordPress vulnerabilities in 2025, and high-severity vulnerabilities in 2025 outnumbered the previous two years combined. Plugins were 91% of vulnerabilities.
Some hosting providers monitor for vulnerabilities and send notifications but charge extra to mitigate them. Kinsta includes mitigation with every plan automatically. In addition, agencies are Kinsta’s core customers, and the benefit grows with the portfolio size. An agency with 200 clients gets 200 sites of protection without having to track a single vulnerability.
Vulnerability Protection adds a layer to the security Kinsta already includes on every WordPress plan . Cloudflare-powered DDOS protection and a managed WAF stop attacks at the edge, and Bot Protection, which Kinsta launched in June, controls automated traffic. Kinsta Automatic Updates also installs vendor fixes as soon as they are released.
About Kinsta
Kinsta is a premium managed hosting for WordPress solution — designed for all types of businesses, agencies and high-traffic ecommerce stores. In highly competitive markets, Kinsta holds the top G2 score of any solution and is the overall #1 leader for market presence and customer satisfaction within multiple industry categories. Serving small companies to Fortune 500 enterprises, Kinsta supports more than 230,000 customers across 128 countries and brought on over 65,000 new sites in 2025 alone. Kinsta offers 24/7 support 365 days a year — in 10 languages — from its team of expert engineers.
For more information about Kinsta and to sign up for a risk-free trial, visit kinsta.com.
About Patchstack
Patchstack is one of the world’s largest vulnerability intelligence providers, covering the entire lifecycle from detection to mitigation. Powered by RapidMitigate – a technology that combines software composition analysis, threat intelligence, and contextual prioritization – Patchstack delivers site-specific protection rules automatically and only to sites where a vulnerability is actually present, with near-zero false positives and no code changes. Learn more at patchstack.com.
View source version on businesswire.com: https://www.businesswire.com/news/home/20261110876094/en/
Media gallery
