Articles
Newsflash
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF in image upload in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100747 was detected. This vulnerability allows a third-party site to upload files to an event and overwrite existing files. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100747.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF Vulnerability in Event Gallery

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-100748 was detected. This vulnerability allows attackers to perform cross-site request forgery attacks. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100748.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Cross-Site Request Forgery (CSRF) Vulnerability in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100749 was detected. This vulnerability allows an attacker to perform unintended backend cleanup actions via a crafted request. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100749.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Authenticated arbitrary path deletion in Event Gallery extension

In Event Gallery extension component for Joomla versions 6.5.0 and earlier a high severity vulnerability CVE-2026-97164 was detected. This vulnerability allows an authenticated attacker to recursively delete arbitrary directories. To address this issue, users should upgrade Event Gallery extension to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97164.

Read more
CMS
12 Oct 2026 Business and Enterprise Solutions
WordPress: Sensitive Information Exposure in Spectra Legacy – Gutenberg Blocks

In Spectra Legacy – Gutenberg Blocks component for WordPress versions 2.20.0 and earlier a medium severity vulnerability CVE-2026-16302 was detected. This vulnerability allows authenticated attackers with at least Contributor-level access to extract sensitive data, including Instagram Graph API access tokens. To address this issue, users should upgrade Spectra Legacy – Gutenberg Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16302.

Read more
CMS
12 Oct 2026 Business and Enterprise Solutions
WordPress: Unauthorized Data Modification in MailerLite – Signup forms (official)

In MailerLite – Signup forms (official) component for WordPress versions 1.7.21 and earlier a medium severity vulnerability CVE-2026-3253 was detected. This vulnerability allows authenticated attackers to create or delete arbitrary signup forms. To address this issue, users should upgrade MailerLite – Signup forms (official) to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3253.

Read more
CMS
Case Studies