A security vulnerability, tracked as CVE-2026-15964, has been discovered in the Single Sign On For TNG plugin for WordPress, impacting all versions up to and including version 2.0.0. This flaw allows anyone who is not logged into your website to reset the password for any WordPress account on the site, including administrator accounts, without ...
Continue reading
A security vulnerability has been found in the FormGent plugin for WordPress, affecting all versions up to and including 1.9.2. The flaw means the plugin's file deletion feature does not require valid login credentials to use, so people who do not have authorized access to your WordPress site can delete files stored in the plugin's dedicated ...
Continue reading
A security advisory has been issued by Malaysia’s national cybersecurity agency (MyCERT) focused on Microsoft SharePoint, a common platform many businesses use to host internal team sites, shared document storage, and collaborative project portals. The notice was published on 20 July 2026.The advisory alerts users that new exploitation methods ...
Continue reading
A security advisory was published by MyCERT on 22 July 2026, detailing a vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool commonly used to manage user identity checks and single sign-on access for websites and business tools.The vulnerability stems from insufficiently detailed access control rules for the service. ...
Continue reading
