Announcements

CVE-2026-73533 (matched: php)

  • 15th August 2026
A security issue has been found in version 5.2.11 of Ninja Tables Pro, a popular WordPress plugin used to add and manage tables on websites. The affected version of the plugin includes hidden harmful code, which was added when a tampered, malicious version of the plugin was distributed via an old update server that the plugin's developers have ...
Continue reading

CVE-2026-34184 (matched: php)

  • 15th August 2026
A security flaw has been identified in AlanWeb SCADA, a tool some website operators use to manage site functions. The flaw means the system does not enforce proper access restrictions for certain folders, so unauthorized people can view every file stored in those unprotected folders, and even run some of the files stored there. The most serious ...
Continue reading

CVE-2026-18855 (matched: wordpress)

  • 15th August 2026
The Link Library plugin for WordPress has a security flaw affecting all versions up to and including 7.9.4. This issue is caused by the plugin not properly validating file paths when processing link deletions, which could allow unauthenticated attackers to delete files stored on your web server.This risk only applies if you have turned on the ...
Continue reading

CVE-2026-19598 (matched: wordpress)

  • 15th August 2026
A security vulnerability has been identified in the Pods – Custom Content Types and Fields plugin for WordPress, impacting all versions up to and including 3.3.9. This plugin is commonly used to add custom content types and fields to WordPress sites, so it may be installed on your website if you use it for customized content management.The flaw ...
Continue reading