A security flaw has been identified in the Avada theme for WordPress, a popular tool used to build and customize WordPress websites. This issue only affects sites running Avada version 7.16 or older, paired with the Fusion Builder plugin (version 3.16 or older) that is both installed and active on the site.For this flaw to be successfully ...
Continue reading
A security vulnerability has been found in the Total Donations plugin for WordPress, impacting all versions of the plugin up to and including version 2.0.5.
This flaw is a privilege escalation issue, meaning attackers who do not have any existing login credentials for your WordPress site can gain full administrator-level access to your site.
With ...
Continue reading
A security vulnerability has been identified in the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in. This is an improper access control flaw, meaning the tool does not properly restrict who can interact with the data it manages.If exploited, this flaw could allow an unauthorized person to gain access to critical data stored or managed ...
Continue reading
A security vulnerability has been identified in Gitea, a popular tool many web hosting clients use to host and manage code repositories for their development projects.
The issue is a code injection flaw that allows an attacker who already has write access to a Gitea repository to send a maliciously crafted patch to Gitea’s diffpatch API ...
Continue reading
