The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six_storage_create_wp_user() AJAX handler being registered on wp_ajax_nopriv_six_storage_create_wp_user without any nonce, capability, credential, or ownership verification, while calling ...
Continue reading
A security flaw has been identified in the RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress, which impacts all versions up to and including 1.0.4. This flaw allows anyone who does not have login access to your website to delete any files stored on your site's server.If an attacker deletes a critical core WordPress ...
Continue reading
MyCERT released a security advisory on July 20, 2026, focused on Microsoft SharePoint, a popular tool for team collaboration, document management, and internal business workflows. The notice cites newly reported exploitation activity targeting the SharePoint platform.
If you run Microsoft SharePoint sites or services on your hosting account, this ...
Continue reading
A security advisory has been issued for a vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool many organizations use to manage secure access to online accounts and services. The issue stems from the service’s access control settings lacking sufficient granularity, meaning permissions cannot be set finely enough to ...
Continue reading
