Articles
Newsflash
12 Oct 2026 Project and Agile Management
Ansible: Authorization Bypass in Automation Platform Gateway

In affected versions of the Ansible Automation Platform (AAP) gateway a medium severity vulnerability CVE-2026-94416 was detected. This vulnerability allows an authenticated administrator to create a new service key for the Controller service cluster. To address this issue, users should upgrade Ansible to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-94416.

Read more
IT Business Management
12 Oct 2026 Infrastructure and Network
Keycloak: Improper Permission Checks in Admin REST API

In Keycloak affected versions a medium severity vulnerability CVE-2026-97311 was detected. This vulnerability allows an attacker to bypass group visibility permissions. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97311.

Read more
Security
12 Oct 2026 Business and Enterprise Solutions
WordPress: Sensitive Information Exposure in Spectra Legacy – Gutenberg Blocks

In Spectra Legacy – Gutenberg Blocks component for WordPress versions 2.20.0 and earlier a medium severity vulnerability CVE-2026-16302 was detected. This vulnerability allows authenticated attackers with at least Contributor-level access to extract sensitive data, including Instagram Graph API access tokens. To address this issue, users should upgrade Spectra Legacy – Gutenberg Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16302.

Read more
CMS
12 Oct 2026 Business and Enterprise Solutions
WordPress: Unauthorized Data Modification in MailerLite – Signup forms (official)

In MailerLite – Signup forms (official) component for WordPress versions 1.7.21 and earlier a medium severity vulnerability CVE-2026-3253 was detected. This vulnerability allows authenticated attackers to create or delete arbitrary signup forms. To address this issue, users should upgrade MailerLite – Signup forms (official) to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3253.

Read more
CMS
12 Oct 2026 Business and Enterprise Solutions
WordPress: Unauthorized Settings Export or Deletion in Custom Thank You Page for WooCommerce

In Custom Thank You Page for WooCommerce component for WordPress versions 1.1.2 and earlier a medium severity vulnerability CVE-2026-4806 was detected. This vulnerability allows unauthenticated attackers to export or reset the plugin’s settings. To address this issue, users should upgrade Custom Thank You Page for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-4806.

Read more
CMS
9 Oct 2026 Business and Enterprise Solutions
WordPress: Path Traversal vulnerability in eesy_ID2WP – Publish InDesign HTML5 plugin

In eesy_ID2WP – Publish InDesign HTML5 plugin component for WordPress versions 1.0.3 and earlier a high severity vulnerability CVE-2026-77193 was detected. This vulnerability allows unauthenticated attackers to read the contents of arbitrary files on the server. To address this issue, users should upgrade eesy_ID2WP – Publish InDesign HTML5 plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77193.

Read more
CMS
Case Studies