September 2026

Guest Post Forms Expose WordPress Sites to Stored XSS

05.10.202630.09.2026

A vulnerability in Frontend Post Submission Manager Lite can expose WordPress sites using guest submission forms to stored DOM-based XSS….

Simply Schedule Appointments Vulnerability: LFI Risk

05.10.202630.09.2026

A newly disclosed Simply Schedule Appointments vulnerability can allow local file inclusion through the ssa_locale parameter. Although formally classified as…

s2Member Vulnerability: PayPal Checkout RCE Explained

05.10.202626.09.2026

The s2Member vulnerability CVE-2026-19804 can expose WordPress sites to remote code execution when PayPal Checkout and specific Signup Tracking Codes…

Google Expands VideoObject Structured Data

05.10.202626.09.2026

Google has expanded its VideoObject structured data guidance with clearer support for creators, authors, and video engagement statistics. This practical…

Critical Paytium Vulnerability Enables Admin Creation

05.10.202626.09.2026

A critical Paytium vulnerability tracked as CVE-2026-18467 can allow unauthenticated attackers to create WordPress administrator accounts under specific payment-form conditions….

WordPress 7.1.2 Fixes Critical RCE Vulnerability

05.10.202624.09.2026

WordPress 7.1.2 fixes a critical unauthenticated path traversal vulnerability that can lead to remote code execution under specific theme and…

Critical JetFormBuilder Vulnerability Is Under Active Attack

05.10.202616.09.2026

A critical JetFormBuilder vulnerability can allow unauthenticated attackers to create WordPress administrator accounts through unsafe form validation. Site owners running…