A security flaw tracked as CVE-2026-4703 has been found in the free WS Form drag-and-drop contact form builder plugin for WordPress, impacting all versions up to and including 1.10.80. The issue allows unauthenticated attackers (people who do not have valid login access to your website) to send specially crafted form submissions that can inject ...
Continue reading
A security flaw has been found in the WS Form LITE drag-and-drop contact form builder plugin for WordPress, a popular tool for adding custom contact forms to websites without coding experience. The flaw impacts all versions of the plugin up to 1.10.80, and allows unauthenticated attackers (people who do not have access to your site’s admin area) ...
Continue reading
A security vulnerability has been identified in the Mailgun for WordPress plugin, impacting all versions up to and including 2.2.0. This flaw lets outside attackers trick your WordPress site into sending unauthorized requests to Mailgun's services using your site's own stored Mailgun account credentials, without needing to log into your WordPress ...
Continue reading
A security vulnerability has been identified in Zimbra Collaboration Suite (ZCS), a popular platform used for email, shared calendars, and team collaboration tools that many businesses rely on for their operations.The flaw is an operating system command injection issue. It allows an unauthenticated attacker (someone who does not need a valid ...
Continue reading
