Articles
Newsflash
24 Sep 2026 Business and Enterprise Solutions
WordPress: Denial of Service in EDD Product Catalog Feed by PixelYourSite

In EDD Product Catalog Feed by PixelYourSite component for WordPress versions 1.0.2 and earlier a high severity vulnerability CVE-2026-9331 was detected. This vulnerability allows authenticated attackers to delete arbitrary option values. To address this issue, users should upgrade EDD Product Catalog Feed by PixelYourSite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9331.

Read more
CMS
24 Sep 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

In LearnPress – WordPress LMS Plugin for Create and Sell Online Courses component for WordPress versions up to and including 4.3.9.1 a medium severity vulnerability CVE-2026-12230 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade LearnPress – WordPress LMS Plugin for Create and Sell Online Courses to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12230.

Read more
CMS
24 Sep 2026 Business and Enterprise Solutions
WordPress: SQL Injection Vulnerability in WPML Multilingual CMS

In WPML Multilingual CMS component for WordPress versions 4.9.5 and earlier a medium severity vulnerability CVE-2026-17509 was detected. This vulnerability allows authenticated attackers to extract sensitive information from the database. To address this issue, users should upgrade WPML Multilingual CMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-17509.

Read more
CMS
24 Sep 2026 Business and Enterprise Solutions
WordPress: Arbitrary shortcode execution in Beaver Builder Page Builder – Drag and Drop Website Builder

In Beaver Builder Page Builder – Drag and Drop Website Builder component for WordPress versions 2.10.3.1 and earlier a medium severity vulnerability CVE-2026-18021 was detected. This vulnerability allows attackers to execute arbitrary shortcodes. To address this issue, users should upgrade Beaver Builder Page Builder – Drag and Drop Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-18021.

Read more
CMS
24 Sep 2026 Business and Enterprise Solutions
WordPress: PHP Object Injection in Live Composer – Free WordPress Website Builder

In Live Composer – Free WordPress Website Builder component for WordPress versions 2.1.18 and earlier a high severity vulnerability CVE-2026-16502 was detected. This vulnerability allows authenticated attackers to inject a PHP Object. To address this issue, users should upgrade Live Composer – Free WordPress Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16502.

Read more
CMS
23 Sep 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting vulnerability in Powerkit

In Powerkit component for WordPress versions 3.0.4 and earlier a medium severity vulnerability CVE-2026-2390 was detected. This vulnerability allows attackers to inject arbitrary web scripts. To address this issue, users should upgrade Powerkit to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2390.

Read more
CMS
Case Studies