Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

Are there any services (free or otherwise) that provide information on new vulnerabilities for a given piece of technology?

For example, say I want to be updated of all new Wordpress vulnerabilities via RSS or email? What would be my best option?

share|improve this question

marked as duplicate by TildalWave, Xander, NULLZ, Terry Chia, Iszi Dec 1 '13 at 6:36

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

There is no best option. National vulnerability database offers CVE feeds which can be filtered by IfThisThenThat or Yahoo! Pipes. There are also mailing lists for most popular pieces of software. – Deer Hunter Jun 14 '13 at 21:21
up vote 5 down vote accepted

The Exploit Database have a twitter feed that updates regularly.

You could use tweetalarm with the keyword [webapps] - Wordpress, and set it to email you whenever a tweet containing that keyword is used. Then you would know about verified exploits for WordPress as soon as they are added to the database.

share|improve this answer
Tweetalarm now seems to be a dead link. – SilverlightFox Sep 2 '15 at 9:21

CVE Details allows you to "generate a custom RSS feed or an embedable vulnerability list widget or a json API call url", filterable on a large range of fields including product.

share|improve this answer

US-CERT provides a free alerting service. They also have feeds from NCAS, which you can sign up for here:

While they don't offer a specific technology or product feed, you could filter them out yourself.

share|improve this answer

Secunia has a nice feed and allows one to sort by vendor as well as product. Long ago one could sign up for email alerts for free, but I don't think that is the case anymore.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.