Announcements

CVE-2026-46420 (matched: php)

  • 19th August 2026
A security vulnerability, tracked as CVE-2026-46420, has been identified in setup-php, a common tool used with GitHub Actions to automatically configure PHP (the programming language that powers most websites and web apps) for project workflows. The tool handles tasks like installing PHP extensions, adjusting PHP settings, setting up code coverage ...
Continue reading

CVE-2019-11049 (matched: php)

  • 19th August 2026
A security vulnerability has been found in specific versions of PHP, the software that powers most dynamic websites, when running on Windows servers. It impacts PHP 7.3.x versions older than 7.3.13, as well as PHP 7.4.0. PHP’s built-in mail() function, which websites use to send automated emails like contact form responses, password reset links, ...
Continue reading

CVE-2026-18315 (matched: wordpress)

  • 19th August 2026
A security flaw has been identified in the TrueBooker – Appointment Booking and Scheduler plugin for WordPress, a tool used to manage appointment booking requests on websites. This issue impacts all versions of the plugin up to and including 1.2.6. The flaw exists because the plugin's account creation feature does not verify that the person ...
Continue reading