A security vulnerability has been found in MariaDB, a common database software used by many websites to store site data. This flaw only affects specific MariaDB versions (10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1) if the wsrep_notify_cmd setting is turned on. If your site uses an ...
Continue reading
A security vulnerability tracked as CVE-2026-73533 has been identified in Ninja Tables Pro, a popular WordPress plugin used to create and manage tables on websites. The issue affects version 5.2.11 of the plugin, which was distributed with hidden malicious code through an old, decommissioned update server that the plugin’s developer no longer ...
Continue reading
A security flaw has been identified in AlanWeb SCADA, a software platform some users run for their operational systems. The issue occurs because the software does not verify whether users are authorized to access certain system folders.This gap allows unauthorized attackers to view all files stored in these unprotected folders, run select files ...
Continue reading
A security vulnerability (tracked as CVE-2026-16142) impacts the TrueBooker plugin for WordPress, with all versions of the plugin up to and including 1.2.6 affected.This flaw allows anyone who is not logged into your WordPress site to change the email address linked to any user account on the site, including administrator accounts. An attacker ...
Continue reading
