A security flaw has been identified in two specific versions of MariaDB, a popular open-source database software used by many websites to store content, user accounts, and other site data. The affected versions are 3.3.18 and 3.4.8.The issue creates an unexpected gap in protection against SQL injection attacks, a common type of cyber threat where ...
Continue reading
A popular WordPress plugin used to add Apple social login options to WooCommerce stores has a serious security vulnerability that impacts all versions up to and including 2.8.7.
The flaw exists because the plugin fails to properly validate Apple login requests, and a security safeguard meant to protect the login process is publicly visible on your ...
Continue reading
A critical security flaw has been found in the Single Sign On For TNG plugin for WordPress, affecting all versions up to and including 2.0.0. This vulnerability lets any visitor who is not logged into your site reset the password for any WordPress account on your site, including administrator accounts.The flaw exists because the plugin's password ...
Continue reading
A security flaw has been found in the FormGent plugin for WordPress, impacting all versions up to and including 1.9.2. The issue lets unauthenticated attackers (people without login access to your WordPress dashboard) delete files via an unsecured tool built into the plugin, with no login check required to use that tool.At first, attackers can ...
Continue reading