A security flaw has been found in the WS Form LITE drag-and-drop contact form builder plugin for WordPress, affecting all versions up to and including 1.10.80. The issue exists because the plugin does not safely process data submitted through its contact forms, which could allow attackers who are not logged into your WordPress site to send harmful ...
Continue reading
A security vulnerability, tracked as CVE-2026-78003, has been found in the Mailgun for WordPress plugin, a tool used to connect WordPress websites to the Mailgun email service. All versions of the plugin up to and including 2.2.0 have a flaw caused by missing proper input checks in the code that manages address lists.This flaw lets unauthenticated ...
Continue reading
A security vulnerability has been found in TrueConf Server, a tool often used to run video conferencing and team communication services for websites and business operations. The flaw is a missing authentication issue for a critical server function, meaning a key sensitive part of the server does not require valid login credentials to access.If an ...
Continue reading
A security flaw has been identified in TrueConf Server. This is a code injection vulnerability, a type of issue that lets unauthorized people run custom, unapproved code on systems running the affected software.
To exploit this flaw, an attacker would need network access to port 4307/TCP on the system hosting TrueConf Server. They can send a ...
Continue reading
