Articles
Newsflash
28 Aug 2026 Business and Enterprise Solutions
WordPress: Backdoor vulnerability in Link Factory plugin

In the Link Factory component for WordPress a critical severity vulnerability CVE-2026-15413 was detected. This vulnerability allows an attacker to gain unauthorized remote control over the website. To address this issue, users should upgrade Link Factory to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15413.

Read more
CMS
28 Aug 2026 DevOps
Node: Event Loop Stalling in @fastify/busboy

In @fastify/busboy component for Node versions 3.1.0 through 3.2.0 a high severity vulnerability CVE-2026-19484 was detected. This vulnerability allows a remote unauthenticated attacker to stall the Node.js event loop. To address this issue, users should upgrade @fastify/busboy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19484.

Read more
Developer Tools
28 Aug 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting vulnerability in PPWP – Password Protect Pages

In PPWP – Password Protect Pages component for WordPress versions 1.9.21 and earlier a medium severity vulnerability CVE-2026-3639 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade PPWP – Password Protect Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3639.

Read more
CMS
28 Aug 2026 Business and Enterprise Solutions
WordPress: Authenticated user can disconnect store in Ecwid by Lightspeed Ecommerce Shopping Cart plugin

In Ecwid by Lightspeed Ecommerce Shopping Cart component for WordPress versions before 7.0.9 a medium severity vulnerability CVE-2026-14332 was detected. This vulnerability allows any authenticated user to disconnect the store and take the storefront offline. To address this issue, users should upgrade Ecwid by Lightspeed Ecommerce Shopping Cart to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14332.

Read more
CMS
28 Aug 2026 Communication and Collaboration
Mattermost: Denial of Service Vulnerability

In Mattermost versions 11.9.0 and earlier, 11.8.4 and earlier, 11.7.7 and earlier, and 10.11.22 and earlier a medium severity vulnerability CVE-2026-14298 was detected. This vulnerability allows an authenticated user to cause a denial of service. To address this issue, users should upgrade Mattermost to version 10.11.23 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14298.

Read more
Communication
27 Aug 2026 Business and Enterprise Solutions
WooCommerce: Arbitrary Order Total Reduction in Wallet System for WooCommerce

In Wallet System for WooCommerce component for WooCommerce versions before 2.7.10 a medium severity vulnerability CVE-2026-15045 was detected. This vulnerability allows authenticated customers to arbitrarily reduce their own order total without paying the merchant. To address this issue, users should upgrade Wallet System for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15045.

Read more
E-commerce
Case Studies