Articles
Newsflash
21 Sep 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting in GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

In GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor component for WordPress versions 2.4.4 and earlier a medium severity vulnerability CVE-2026-2573 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2573.

Read more
CMS
21 Sep 2026 Business and Enterprise Solutions
Joomla: Order Confirmation Fraud Vulnerability in J2Store

In J2Store component for Joomla versions 1.0.0 through 3.3.21, 4.0.0 through 4.0.21, and 4.1.0 through 4.1.6 a high severity vulnerability CVE-2026-77999 was detected. This vulnerability allows an unauthenticated attacker to forge PayPal Instant Payment Notification (IPN) callbacks to fraudulently confirm orders without payment. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77999.

Read more
CMS
21 Sep 2026 Business and Enterprise Solutions
Joomla: Anonymous cart-record tampering in J2Store

In J2Store component for Joomla versions 1.0.0 through 3.3.21, 4.0.0 through 4.0.21, and 4.1.0 through 4.1.6 a high severity vulnerability CVE-2026-78064 was detected. This vulnerability allows attackers to tamper with cart records. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78064.

Read more
CMS
21 Sep 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting in Divi theme

In Divi theme component for WordPress versions 4.27.6 and earlier a medium severity vulnerability CVE-2026-3852 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade Divi theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3852.

Read more
CMS
21 Sep 2026 Business and Enterprise Solutions
Joomla: Open Redirect vulnerability in J2Store

In J2Store component for Joomla versions 1.0.0-3.3.21, 4.0.0-4.0.21, and 4.1.0-4.1.6 a medium severity vulnerability CVE-2026-78000 was detected. This vulnerability allows attackers to perform open redirects, facilitating phishing attacks. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78000.

Read more
CMS
18 Sep 2026 Project and Agile Management
Kimai: Authorization Bypass Vulnerability

In Kimai versions 2.65.0 and earlier a medium severity vulnerability CVE-2026-84804 was detected. This vulnerability allows authenticated users to bypass authorization controls. To address this issue, users should upgrade Kimai to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-84804.

Read more
Project Management
Case Studies