A security flaw has been identified in the TranslatePress multilingual plugin for WordPress, a popular tool used to build and manage websites that support multiple languages. The issue affects all versions of the plugin up to and including 3.3.1.The flaw can expose sensitive administrator account information if two common default conditions are ...
Continue reading
A security vulnerability has been identified in the Total Donations plugin for WordPress. The flaw impacts every version of the plugin up to and including version 2.0.5.This is a privilege escalation issue, which means attackers do not need to have an existing account or login for your website to exploit the flaw. If successfully taken advantage ...
Continue reading
A security vulnerability has been identified in the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, tools used to manage web traffic and data for websites. This is an improper access control flaw, meaning the system’s built-in rules for limiting who can view or change data are not working correctly.If your website uses these ...
Continue reading
A security flaw has been identified in Gitea, a code repository management tool used by many hosting clients to store and manage project code and development files.
This is a code injection vulnerability. To exploit it, an attacker would need to already have write access to a Gitea repository. They could send a specially crafted file change ...
Continue reading
