A security flaw, tracked as CVE-2026-8711, affects the NGINX JavaScript feature used in many web server setups. This issue only impacts configurations that use the js_fetch_proxy setting paired with visitor-controlled data (such as information from visitor browser headers, URL parameters, or cookies) and also call the ngx.fetch() function from ...
Continue reading
A security flaw has been found in versions 3.3.18 and 3.4.8 of MariaDB, a popular open-source database system that many websites use to store data like user account information, product listings, and site content. The vulnerability only triggers in specific circumstances: when a website takes unvetted user input (such as form entries or search ...
Continue reading
A security flaw has been identified in the popular WordPress plugin SAML Single Sign On (SSO Login), a tool that lets users log into WordPress sites using credentials from other services they already use. All versions of the plugin up to and including version 5.4.4 are affected by this vulnerability.The flaw stems from a coding error that causes ...
Continue reading
A security vulnerability (identified as CVE-2026-48907) affects the JCE editor extension used on Joomla-based websites. This flaw allows people who do not have valid login credentials for your site to create new, unauthorized editor user profiles for the extension.Once an attacker creates one of these unapproved profiles, they can upload and run ...
Continue reading
