Our news and updates

In HashBar – WordPress Notification Bar component for WordPress versions 2.0.3 and earlier a high severity vulnerability CVE-2026-94117 was detected. This vulnerability allows attackers to execute arbitrary SQL commands. To address this issue, users should upgrade HashBar – WordPress Notification Bar to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-94117.

In MarketKing plugin component for WordPress versions before 2.1.72 a medium severity vulnerability CVE-2026-93341 was detected. This vulnerability allows authenticated attackers to create fraudulent refund requests against any order. To address this issue, users should upgrade MarketKing to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-93341.

In MarketKing component for WordPress versions before 2.1.72 a medium severity vulnerability CVE-2026-93343 was detected. This vulnerability allows authenticated attackers to retrieve personally identifiable information of all registered vendors. To address this issue, users should upgrade MarketKing to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-93343.

In Mattermost versions 11.10.1 and earlier, 11.9.1 and earlier, 11.8.5 and earlier, and 11.7.10 and earlier a medium severity vulnerability CVE-2026-95666 was detected. This vulnerability allows an authenticated user to cause excessive database load. To address this issue, users should upgrade Mattermost to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-95666.

In WP Recipe Maker component for WordPress versions before 10.8.2 a medium severity vulnerability CVE-2026-86601 was detected. This vulnerability allows unauthenticated users to have arbitrary shortcodes executed server side and to read the content of unpublished recipes. To address this issue, users should upgrade WP Recipe Maker to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-86601.

In Temporal in earlier versions a high severity vulnerability CVE-2026-89139 was detected. This vulnerability allows an attacker to execute arbitrary commands on the host machine. To address this issue, users should upgrade Temporal to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-89139.

In Kubernetes in earlier versions a high severity vulnerability CVE-2026-92574 was detected. This vulnerability allows a user with pod creation privileges to bypass security context restrictions. To address this issue, users should upgrade Kubernetes to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-92574.

In Temporal in affected versions a high severity vulnerability CVE-2026-16651 was detected. This vulnerability allows an attacker to cause a denial of service. To address this issue, users should upgrade Temporal to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16651.

In affected versions of Temporal a high severity vulnerability CVE-2026-16652 was detected. This vulnerability allows an authenticated attacker to cause a denial of service. To address this issue, users should upgrade Temporal to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16652.