Ultimate Member Vulnerabilities Put Private Data at Risk
Two Ultimate Member vulnerabilities can expose privacy-restricted profile fields and place administrator sessions at risk through stored XSS. Site owners…
WordPress vulnerabilities
All-in-One WP Migration Vulnerability: Restore RCE Risk
A newly addressed All-in-One WP Migration vulnerability highlights why restoring an untrusted WordPress archive can carry unexpected security risks. Learn…
FluentCart Vulnerability Can Delete Critical WordPress Files
A FluentCart vulnerability involving unsafe file path handling could put important WordPress files at risk, including wp-config.php. Store owners should…
Two WordPress Plugins Put Subscriber Accounts at Risk
Two serious WordPress plugin vulnerabilities show why Subscriber accounts should never be treated as harmless. AcyMailing and Frontend Admin contained…