Announcements

CVE-2026-18432 (matched: wordpress)

  • 16th August 2026
A security vulnerability has been found in the Frontend Admin by DynamiApps plugin for WordPress, a tool many site owners use to manage WordPress features directly from the public part of their website. The flaw affects all versions of the plugin up to and including version 3.29.9.The vulnerability lets unauthorized users gain full administrator ...
Continue reading

CVE-2026-16098 (matched: wordpress)

  • 16th August 2026
A security flaw has been found in the ProSolution WP Client plugin for WordPress, which affects all versions up to and including 2.0.10. This flaw lets people who do not have admin access to your WordPress site upload harmful files that can run code on your website.The security check meant to block unapproved file uploads is accidentally visible ...
Continue reading

CVE-2026-14524 (matched: wordpress)

  • 16th August 2026
A security vulnerability has been identified in the ProSolution WP Client plugin for WordPress, affecting all versions up to and including 2.0.8. The flaw stems from the plugin not properly validating file paths when processing file deletion requests, creating a security gap for sites using this tool.This gap makes it possible for attackers who do ...
Continue reading

CVE-2026-18855 (matched: wordpress)

  • 16th August 2026
A security flaw has been found in the Link Library plugin for WordPress, affecting all versions up to and including 7.9.4. This flaw allows attackers who are not logged into your website to delete any file stored on your site's server, but only under specific conditions.For the flaw to be exploited, the plugin's "Delete local file on link ...
Continue reading