Announcements

CVE-2026-17543 (matched: php)

  • 7th August 2026
A security flaw has been identified in specific versions of PHP, the software that powers most dynamic websites including content management systems, online stores, and custom web applications. The issue is caused by incorrect handling of backslash characters in data submitted by visitors to your site. This flaw makes a common type of cyberattack ...
Continue reading

CVE-2026-65883 (matched: php)

  • 7th August 2026
A security flaw has been found in the Aimy Captcha-Less Form Guard extension for Joomla, versions 18.0 through 20.0, made by aimy-extensions.com.The vulnerability works when an attacker sends a specially crafted request using a form field named clfgd. This lets them inject malicious code into your site’s PHP systems, which can then run ...
Continue reading

CVE-2026-14365 (matched: wordpress)

  • 7th August 2026
A security flaw has been found in the TrueBooker – Appointment Booking and Scheduler System plugin for WordPress, a tool used to manage appointment bookings on websites. The issue impacts every version of the plugin up to and including version 1.2.3, and occurs because the plugin does not properly check if a person trying to make changes is ...
Continue reading

CVE-2026-14364 (matched: wordpress)

  • 7th August 2026
A security flaw has been found in the TrueBooker – Appointment Booking and Scheduler System plugin for WordPress. The issue impacts all versions of the plugin up to and including version 1.2.3, and stems from the plugin failing to properly verify a person’s identity before processing a password reset request.This vulnerability allows ...
Continue reading