Articles
Newsflash
22 Sep 2026 Business and Enterprise Solutions
WordPress: Shortcode Execution in JetFormBuilder

In JetFormBuilder component for WordPress versions before 3.6.5.2 a medium severity vulnerability CVE-2026-19859 was detected. This vulnerability allows unauthenticated users to execute arbitrary shortcodes. To address this issue, users should upgrade JetFormBuilder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19859.

Read more
CMS
22 Sep 2026 Data Management and Analytics
PostgreSQL: Arbitrary Code Execution in PostgreSQL Anonymizer

In PostgreSQL Anonymizer component for PostgreSQL versions earlier than 3.1.4 a high severity vulnerability CVE-2026-19633 was detected. This vulnerability allows unprivileged masked users to execute arbitrary code with elevated privileges. To address this issue, users should upgrade PostgreSQL Anonymizer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19633.

Read more
Database
22 Sep 2026 Business and Enterprise Solutions
WordPress: Email Header Injection in JetFormBuilder

In JetFormBuilder component for WordPress versions before 3.6.5.2 a medium severity vulnerability CVE-2026-19862 was detected. This vulnerability allows unauthenticated users to inject arbitrary e-mail headers, add hidden recipients and spoof the sender. To address this issue, users should upgrade JetFormBuilder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19862.

Read more
CMS
22 Sep 2026 Business and Enterprise Solutions
WordPress: Unauthenticated Shortcode Execution in Ninja Forms

In Ninja Forms component for WordPress versions from 3.14.10 before 3.15.2 a medium severity vulnerability CVE-2026-80437 was detected. This vulnerability allows unauthenticated users to run any shortcode registered on the site. To address this issue, users should upgrade Ninja Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-80437.

Read more
CMS
22 Sep 2026 Business and Enterprise Solutions
WordPress: Shortcode Execution in Redirection for Contact Form 7 Plugin

In Redirection for Contact Form 7 plugin component for WordPress versions from 2.2.7 before 3.2.11 a medium severity vulnerability CVE-2026-80439 was detected. This vulnerability allows unauthenticated users to execute shortcodes and read their output. To address this issue, users should upgrade Redirection for Contact Form 7 plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-80439.

Read more
CMS
21 Sep 2026 Business and Enterprise Solutions
WordPress: Stored Cross-Site Scripting in GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

In GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor component for WordPress versions 2.4.4 and earlier a medium severity vulnerability CVE-2026-2573 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2573.

Read more
CMS
Case Studies