Our news and updates

In Apache Tomcat versions 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.0.M1 through 9.0.118, 8.5.0 through 8.5.100, and 7.0.0 through 7.0.109 a medium severity vulnerability CVE-2026-50229 was detected. This vulnerability allows a remote attacker to inject malicious scripts into the ‘number guess example’ web page. To address this issue, users should upgrade Apache Tomcat to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50229.

In Apache Tomcat versions 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.0.M1 through 9.0.118, and 8.5.0 through 8.5.100 a high severity vulnerability CVE-2026-53404 was detected. This vulnerability allows attackers to bypass security constraints if rewrite rules are used for access control. To address this issue, users should upgrade Apache Tomcat to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-53404.

In Apache Tomcat versions 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.13 through 9.0.18, 8.5.38 through 8.5.100, and 7.0.100 through 7.0.109 a medium severity vulnerability CVE-2026-55955 was detected. This vulnerability allows a replay attack against the EncryptionInterceptor in the cluster component. To address this issue, users should upgrade Apache Tomcat to version 9.0.119 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55955.

In Webmention component for WordPress versions 5.8.0 and earlier a high severity vulnerability CVE-2026-10513 was detected. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. To address this issue, users should upgrade Webmention to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10513.

In JetWidgets For Elementor component for WordPress versions 1.0.21 and earlier a medium severity vulnerability CVE-2026-11380 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade JetWidgets For Elementor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11380.

In APCu Manager component for WordPress versions before 4.5.0 a high severity vulnerability CVE-2026-10083 was detected. This vulnerability allows attackers to execute arbitrary web scripts. To address this issue, users should upgrade APCu Manager to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10083.

In F4 Post Tree component for WordPress versions before 2.0.5 a medium severity vulnerability CVE-2026-9676 was detected. This vulnerability allows authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts. To address this issue, users should upgrade F4 Post Tree to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9676.

In Helix3 plugin component for Joomla in unpatched versions a high severity vulnerability CVE-2026-49049 was detected. This vulnerability allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters. To address this issue, users should upgrade Helix3 plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-49049.

In Page Builder CK component for Joomla versions before 3.6.0 a critical severity vulnerability CVE-2026-56290 was detected. This vulnerability allows attackers to upload arbitrary files and achieve remote code execution. To address this issue, users should upgrade Page Builder CK to version 3.6.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56290.