By Month

Oct 2026
Sept 2026
Aug 2026
Jul 2026
Dec 2025
Apr 2024
Mar 2024
Older Announcements...
View RSS Feed

  By Month

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket

Announcements

CVE-2021-40438 (matched: apache http server)

  • 3rd August 2026

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2021-40438

Continue reading

CVE-2026-8457 (matched: wordpress)

  • 3rd August 2026
If your WordPress site uses the WooCommerce Social Login plugin in version 2.8.7 or older, the plugin has a critical security flaw in its Apple login feature. The plugin fails to properly verify that Apple login requests are legitimate, and a security protection meant to limit access to the login flow is publicly exposed to all visitors via ...
Continue reading

CVE-2026-15964 (matched: wordpress)

  • 3rd August 2026
This security notice applies to WordPress site owners who use the Single Sign On For TNG plugin, in all versions up to 2.0.0. The plugin has a critical flaw that allows anyone who visits your site to reset the password for any WordPress account on your site, including administrator accounts, without needing permission or confirmation.The flaw ...
Continue reading

CVE-2026-3141 (matched: wordpress)

  • 3rd August 2026
A security vulnerability has been identified in the FormGent plugin for WordPress, a tool many site owners use to manage form submissions and user-uploaded files. The flaw impacts all versions of the plugin up to and including version 1.9.2.The vulnerability exists because the plugin's built-in file-management tool does not require users to log in ...
Continue reading

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket