Articles
Newsflash
4 Aug 2026 Business and Enterprise Solutions
WordPress: Unauthenticated Booking Cancellation in WP Travel

In WP Travel component for WordPress versions 11.7.1 and earlier a medium severity vulnerability CVE-2026-11868 was detected. This vulnerability allows unauthenticated users to cancel arbitrary bookings. To address this issue, users should upgrade WP Travel to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11868.

Read more
CMS
4 Aug 2026 Business and Enterprise Solutions
WordPress: Stored XSS vulnerability in Unlimited Elements For Elementor

In Unlimited Elements For Elementor component for WordPress versions before 2.0.11 a high severity vulnerability CVE-2026-10081 was detected. This vulnerability allows unauthenticated attackers to inject malicious scripts into pages displaying Google Reviews. To address this issue, users should upgrade Unlimited Elements For Elementor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10081.

Read more
CMS
4 Aug 2026 Business and Enterprise Solutions
WordPress: Arbitrary Shortcode Execution in Reviews Feed

In Reviews Feed component for WordPress versions before 2.6.5 a medium severity vulnerability CVE-2026-10724 was detected. This vulnerability allows unauthenticated attackers to execute arbitrary shortcodes. To address this issue, users should upgrade Reviews Feed to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10724.

Read more
CMS
4 Aug 2026 Business and Enterprise Solutions
WordPress: Improper Access Control in All in One SEO plugin

In All in One SEO component for WordPress versions before 4.9.9 a low severity vulnerability CVE-2026-10755 was detected. This vulnerability allows users with low-level privileges to overwrite or reset the site-wide AI integration state. To address this issue, users should upgrade All in One SEO to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10755.

Read more
CMS
4 Aug 2026 Business and Enterprise Solutions
WordPress: Unauthenticated SQL Injection in Modern Event Calendar

In Modern Event Calendar component for WordPress versions before 7.34.0 a high severity vulnerability CVE-2026-11349 was detected. This vulnerability allows attackers to extract sensitive data from the database. To address this issue, users should upgrade Modern Event Calendar to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11349.

Read more
CMS
3 Aug 2026 DevOps
Centrifugo: Improper JSON Web Key Set (JWKS) endpoint verification

In Centrifugo versions prior to 6.8.1 a high severity vulnerability CVE-2026-49998 was detected. This vulnerability allows an attacker to bypass authentication by reusing a key from one allowed issuer to verify a token for a different issuer. To address this issue, users should upgrade Centrifugo to version 6.8.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-49998.

Read more
Developer Tools
Case Studies