Tag
Vulnerabilities in PHP, WordPress, plugins and build tools that need action on your server, with how to check and patch.
7 articles
Two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) allow remote code execution and are being exploited. Here is how to check your server, pa…
CVE-2026-87902 is a critical WordPress core RCE flaw, no plugin needed, affecting every version from 4.7 through 7.1.1. Here's how it works, why Docke…
Two critical, unauthenticated CVEs (CVSS 9.8) hit The Events Calendar plugin a day apart, putting 600,000+ WordPress sites at risk. Here's what each a…
CVE-2026-8457 let attackers log in as any admin on WooCommerce sites using Apple login, with no password needed. Here is what happened, how to check i…
CVE-2026-32475 is a critical, unauthenticated file upload flaw in Elementor Pro up to 4.2.1, fixed in 4.2.2. Here is how to check your version, why an…
A critical vulnerability in the All-in-One WP Migration and Backup plugin, used on over 5 million sites, lets an attacker achieve remote code executio…
A Composer bug leaked GitHub Actions tokens straight into CI logs when it encountered GitHub's new token format. Here's how to check if you were affec…
