Our news and updates

In Weaviate versions before 1.38.0 a high severity vulnerability CVE-2026-59093 was detected. This vulnerability allows an attacker to escalate their privileges. To address this issue, users should upgrade Weaviate to version 1.38.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59093.

In weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot component for WordPress versions 2.3.0 and earlier a medium severity vulnerability CVE-2026-12729 was detected. This vulnerability allows attackers to execute sensitive operations without proper authorization. To address this issue, users should upgrade weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12729.

In Forgejo versions before 15.0.3 a medium severity vulnerability CVE-2026-59102 was detected. This vulnerability allows authenticated attackers to execute arbitrary JavaScript in other users’ browsers. To address this issue, users should upgrade Forgejo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59102.

In Plane versions 4.6.3 and earlier a critical severity vulnerability CVE-2026-38971 was detected. This vulnerability allows an attacker to access sensitive information or cause a denial of service. To address this issue, users should upgrade Plane to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-38971.

In OpenAI Chatbot for WordPress – Helper component for WordPress versions 1.1.4 and earlier a high severity vulnerability CVE-2025-69134 was detected. This vulnerability allows attackers to delete arbitrary content without authentication. To address this issue, users should upgrade OpenAI Chatbot for WordPress – Helper to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69134.

In SpaLab | Beauty Salon WordPress Theme component for WordPress versions 6.7 and earlier a high severity vulnerability CVE-2025-69154 was detected. This vulnerability allows attackers to execute arbitrary web scripts or HTML. To address this issue, users should upgrade SpaLab | Beauty Salon WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69154.

In Fitness Zone WordPress Theme component for WordPress versions 5.7 and earlier a high severity vulnerability CVE-2025-69155 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade Fitness Zone WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69155.

In Kids Zone – Children WordPress Theme component for WordPress versions 5.4 and earlier a high severity vulnerability CVE-2025-69156 was detected. This vulnerability allows attackers to execute arbitrary web scripts or HTML. To address this issue, users should upgrade Kids Zone – Children WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69156.

In Kibana versions from 8.0.0 up to and including 8.19.14 a medium severity vulnerability CVE-2026-49087 was detected. This vulnerability allows an authenticated user to cause a denial of service by submitting a specially crafted bulk deletion request. To address this issue, users should upgrade Kibana to version 8.19.15 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-49087.