Web Security

Installing the WordPress 7.1.4 Fix Can Still Expose Sites

Installing the WordPress 7.1.4 Fix Can Still Expose Sites

Nov 6, 2026 · 3 min read

Rails Active Storage Flaw Lets Uploads Write Server Files

Rails Active Storage Flaw Lets Uploads Write Server Files

Nov 4, 2026 · 2 min read

WordPress Core RCE Flaw Probed 63,000 Times; Update to 7.1.4

WordPress Core RCE Flaw Probed 63,000 Times; Update to 7.1.4

Oct 30, 2026 · 2 min read

PHP Warns of a Third RCE Flaw, CVE-2026-115560, No Patch Yet

PHP Warns of a Third RCE Flaw, CVE-2026-115560, No Patch Yet

Oct 23, 2026 · 1 min read

WordPress Click2Shell Flaw: CSRF Chain Enables PHP Code Execution

WordPress Click2Shell Flaw: CSRF Chain Enables PHP Code Execution

Sep 22, 2026 · 1 min read

Chinese Hackers Plant Apache Modules in Brazilian Gov Sites

Chinese Hackers Plant Apache Modules in Brazilian Gov Sites

Sep 3, 2026 · 1 min read

Pods WordPress Plugin Flaw Lets Attackers Seize Admin Access

Pods WordPress Plugin Flaw Lets Attackers Seize Admin Access

Aug 30, 2026 · 1 min read

Next.js Patches Two Critical RCEs on Windows and AVIF Images

Next.js Patches Two Critical RCEs on Windows and AVIF Images

Aug 28, 2026 · 1 min read

Critical Avada Theme Flaw Lets Hackers Hijack WordPress Sites

Critical Avada Theme Flaw Lets Hackers Hijack WordPress Sites

Aug 26, 2026 · 1 min read

BdThemes Plugin Supply-Chain Attack Creates Rogue WordPress Admins

BdThemes Plugin Supply-Chain Attack Creates Rogue WordPress Admins

Aug 10, 2026 · 1 min read

WordPress Patches Login XSS That Can Lead to Full Site Takeover

WordPress Patches Login XSS That Can Lead to Full Site Takeover

Aug 7, 2026 · 1 min read

Polymarket Users Lost $3 Million in a Supply Chain Attack

Polymarket Users Lost $3 Million in a Supply Chain Attack

Jun 27, 2026 · 1 min read

1 2