Latest Stories
Don’t miss our hot and upcoming stories
osTicket WP Bridge CSRF Enables Stored XSS | CVE20259882 | 2025-09-20
Urgent guide to CVE-2025-9882 CSRF stored XSS in osTicket WP Bridge with mitigations
StoreEngine Authenticated Arbitrary File Upload Vulnerability | CVE20259216 | 2025-09-16
Urgent guide to mitigating StoreEngine CVE-2025-9216 arbitrary file upload on WordPress sites
Critical Subscriber Arbitrary File Download in StoreEngine | CVE20259215 | 2025-09-17
StoreEngine CVE-2025-9215 arbitrary file download risk in WordPress; urgent patch, WAF guidance.
WordPress Plugin CSRF Enables Arbitrary Directory Deletion | CVE202510188 | 2025-09-16
CVE-2025-10188 CSRF vulnerability in WordPress The Hack Repair Guy Plugin Archiver; update to 3.1.1.
SummAry
