Announcements

MA-1479.072026: MyCERT Advisory - Recent Ransomware Activities Observed: Best Practices for Prevention and Mitigation

  • 24th August 2026
On July 26, 2026, Malaysia’s national cybersecurity agency MyCERT released an advisory warning of observed recent increases in ransomware activity targeting organizations, including businesses that run websites.Ransomware is a type of harmful software that locks up your website files, customer data, or access to your hosting account, and demands ...
Continue reading

CVE-2026-4703 (matched: php)

  • 23rd August 2026
A security flaw has been identified in the WS Form LITE drag-and-drop contact form builder plugin for WordPress, a tool used to create custom forms on websites. The flaw impacts all versions of the plugin up to and including version 1.10.80, and stems from how the plugin handles data submitted through your site’s forms.This specific ...
Continue reading

CVE-2026-4703 (matched: wordpress)

  • 23rd August 2026
A security flaw has been found in the WS Form LITE drag-and-drop contact form plugin for WordPress, which impacts all versions up to and including 1.10.80. The vulnerability allows people who don’t have login access to your WordPress site to inject harmful code into your site’s server by submitting specially crafted entries through forms built ...
Continue reading

CVE-2026-78003 (matched: wordpress)

  • 23rd August 2026
A security flaw has been found in the Mailgun for WordPress plugin, a common tool used to send and manage emails from WordPress websites, affecting all versions up to and including 2.2.0. The flaw exists because the plugin does not properly validate user input when processing address list requests. This allows unauthenticated attackers to send ...
Continue reading