Announcements

CVE-2026-18432 (matched: wordpress)

  • 18th August 2026
A security flaw has been found in the Frontend Admin by DynamiApps plugin for WordPress, affecting all versions up to and including 3.29.9. This is a privilege escalation vulnerability, meaning it lets unauthorized people gain higher-level access to your WordPress site than they are supposed to have. Attackers can exploit this issue without being ...
Continue reading

CVE-2026-16098 (matched: wordpress)

  • 18th August 2026
A security flaw has been identified in the ProSolution WP Client plugin for WordPress, affecting all versions up to and including 2.0.10. The vulnerability allows unauthenticated visitors (people who do not have login access to your WordPress dashboard) to upload files to your website.This is possible due to gaps in two key security safeguards for ...
Continue reading

Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability

  • 18th August 2026
A security vulnerability has been identified in Ray, a development tool used by many people building applications and online services. This is a code injection flaw, which means an unauthorized attacker could potentially run harmful code on systems that use the tool, a risk referred to as remote code execution.The issue can be exploited when ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 18th August 2026
On July 20, 2026, Malaysia’s national cybersecurity agency MyCERT published an advisory addressing new active exploits targeting Microsoft SharePoint, a widely used platform for building internal team sites, sharing business documents, and managing team collaborative workflows. These newly identified exploits pose a risk to unsecured SharePoint ...
Continue reading