A security vulnerability tracked as CVE-2026-15341 impacts the User Session Synchronizer plugin for WordPress, with all versions up to and including 1.4.0 affected. This flaw allows unauthenticated attackers to completely bypass login requirements to take over any user account on an affected site, including administrator accounts that have full ...
Continue reading
A security vulnerability has been found in the 6Storage Rentals plugin for WordPress, affecting all versions up to and including 2.27.0.
This flaw allows people who do not have authorized access to your website to log in to any existing user account on your WordPress site, including full administrator accounts. To carry out this unauthorized ...
Continue reading
A security flaw has been identified in the RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress, impacting all versions up to and including 1.0.4. The vulnerability stems from poor validation of file paths, which allows unauthenticated attackers (people who do not have login access to your website) to delete any files ...
Continue reading
On July 20, 2026, Malaysia’s national cybersecurity agency (MyCERT) issued a security advisory recommending that organizations harden their Microsoft SharePoint deployments, following confirmed new attempts to exploit vulnerabilities in the platform. SharePoint is a common tool used by businesses to host shared document libraries, team ...
Continue reading
