Announcements

CVE-2019-11049 (matched: php)

  • 17th August 2026
A security flaw has been identified in specific versions of PHP, the programming language that powers many dynamic website features like contact forms, shopping carts, and user accounts. This issue affects PHP 7.3.x versions older than 7.3.13, and PHP 7.4.0, but only when these versions are running on Windows servers.The flaw is triggered when a ...
Continue reading

CVE-2026-18432 (matched: wordpress)

  • 17th August 2026
A security vulnerability has been found in the Frontend Admin by DynamiApps plugin for WordPress, affecting all versions up to and including 3.29.9. This flaw could let unauthorized users gain full administrator access to your WordPress site.If you have a public-facing user form configured to use this plugin, even people who are not logged into ...
Continue reading

CVE-2026-16098 (matched: wordpress)

  • 17th August 2026
A serious security vulnerability, tracked as CVE-2026-16098, affects the ProSolution WP Client plugin for WordPress in all versions up to and including 2.0.10. This flaw allows unauthenticated attackers (people who do not have login access to your WordPress dashboard) to upload dangerous executable files to your website. Once these files are in ...
Continue reading

Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability

  • 17th August 2026
A code injection security flaw has been identified in Ray, a tool commonly used by website and application developers for building and testing projects. This type of vulnerability can allow attackers to run unauthorized, harmful code on any system where Ray is installed.The flaw can be triggered remotely when users access systems running Ray via ...
Continue reading