A critical security vulnerability has been identified in MaxSite CMS that allows unapproved, unlogged-in users to run harmful code on websites using this platform.
The flaw exploits the CMS's installation setup page, which remains accessible even after you finish building your site. Attackers can send specially crafted requests to this page, ...
Continue reading
A critical security flaw has been found in OpenEMR, a popular open-source electronic medical records platform, affecting all versions up to 8.2.0. The flaw exists in the software's document category organization feature, which is used to sort and manage stored files and records.The vulnerability allows users with full administrator access to the ...
Continue reading
A security flaw has been found in the Multi Uploader for Gravity Forms plugin for WordPress, affecting all versions up to and including 1.1.8. This issue lets people who do not have login access to your WordPress site permanently delete any media files you have uploaded to your site, such as product images, blog photos, videos, or documents.The ...
Continue reading
A security vulnerability has been identified in the Easy Post Submission plugin for WordPress, a tool many site owners use to let visitors submit content to their websites. The flaw impacts all versions of the plugin up to and including version 2.3.0.The issue is caused by a missing permission check on a core plugin feature that was supposed to ...
Continue reading
