WordPress libheif RCE Exploit Chain Goes Public
UK security firm Fortbridge on Monday published a working end-to-end exploit that turns an authenticated WordPress…
Category
Vulnerability
Cloudflare Containers Flaw Exposed Cross-Tenant Disk Data
Cloudflare has patched a flaw in its Containers platform that let any customer on a paid…
WordPress 7.1.2 Patches CVE-2026-87902 File Inclusion Flaw
WordPress has released version 7.1.2 to fix a critical vulnerability in its core software. The flaw…
cPanel Patches CVE-2026-65643 Root Code Execution Flaw
cPanel has patched CVE-2026-65643, a flaw in its domain parking and addon domain functionality that lets…
Metabase Zero-Day Exposes Framework, Tally Customer Data
Two companies told customers this week that their personal data had been stolen. Neither was breached…
Public Exploit Lands for WordPress XSS2Shell Core Flaw
A working proof-of-concept exploit for “XSS2Shell” is now circulating publicly, raising the stakes on a WordPress…
Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who…
cPanel Bug Hands Database Root to Any Hosting Customer
For three months, the cPanel security story has been about attackers forcing the front door. The…
macOS Screen Sharing Bug Handed Hackers Root, No Password
A critical vulnerability in Apple’s Screen Sharing service let unauthenticated attackers take over a targeted Mac…