Browse our latest security advisories for WordPress plugins, web applications and server software. Search by product name or CVE, filter by date, type or severity, and explore older guidance in the archive. Each article explains the issue in plain English, with affected versions, sensible next steps and links to the original sources.
Clear filters

Searching includes archived guidance. You can change this using Show.
Archived means older guidance—not that the issue is fixed or the software is safe.

207 results

WordPress (205)

BuddyBoss App

CVE-2026-76124
High
Reported: 3 Nov 2026
Summary

A recorded security issue affects BuddyBoss App versions up to and including 3.2.1. There is no confirmed fixed release in the supplied evidence, so site owners should check the plugin version and the publisher’s current guidance.

Summary

A security issue affects FluentCart versions up to and including 1.6.2. A fixed release has not been confirmed in the supplied information, so site owners should check their version and the publisher’s latest guidance.

AI Alt Text Generator

CVE-2026-120578
Medium
Reported: 3 Nov 2026
Summary

A published security advisory describes an authorisation bypass in the AI Alt Text Generator plugin. Here is what it means and what to check.

High
Reported: 3 Nov 2026
Summary

A published vulnerability affects versions up to and including 3.9 of the Advanced Shipment Tracking for WooCommerce plugin. Here is what site owners should check and what the finding does—and does not—mean.

High
Reported: 3 Nov 2026
Summary

The Contact Form Extender for Divi Builder plugin has a reported vulnerability affecting versions up to and including 1.0.6. A fixed release has not been confirmed in the supplied information.

Hosting and server software (1)

Froxlor

CVE-2026-121436
High
Reported: 3 Nov 2026
Summary

A high-severity information disclosure issue affects some Froxlor releases. It concerns API credentials that may be visible to certain administrators, so site owners should check their installed version and follow Froxlor’s current guidance.

Software libraries (1)

svg-sanitizer

CVE-2026-121444
High
Reported: 3 Nov 2026
Summary

A high-severity denial-of-service weakness has been reported in some versions of svg-sanitizer. Here is what site owners should check and what the finding does — and does not — mean.

Always Watching. Always Protecting.

Hipposerve® SwampGuard

Hipposerve® SwampGuard is our intelligent security monitoring platform, continuously analysing traffic, identifying threats, and helping protect your website and hosting services before problems become incidents.
Hipposerve® Sentinel security team illustration featuring PippA and Hipposerve mascots monitoring hosting infrastructure, analysing security data, and protecting websites from online threats in a modern office environment.
Software & WordPress Security Advisories | Hipposerve - CloudLinux with CageFS
CloudLinux with CageFS

Imagine our servers as big apartment buildings, and each website hosted on it lives in its own apartment.

CageFS acts like a personal security guard for each website, ensuring that they can't peek into or mess with their neighbours' spaces.

Software & WordPress Security Advisories | Hipposerve - Proactive Web Defence
Proactive Web Defence

At Hipposerve, our priority is more than just hosting—it's ensuring your digital domain remains secure.

Hipposerve® SwampGuard as a vigilant gatekeeper, while our DDoS protection and malware detection work seamlessly in the background.

Software & WordPress Security Advisories | Hipposerve - Site Backup Included
Site Backup Included

We all have those “Oops!” moments, don't we? Whether it's spilling coffee or accidentally deleting a file, mistakes are a part of life.

With Hipposerve, you've got a safety net! Every single one of our hosting plans includes a rolling backup as standard.

Why Choose Hipposerve?


Software & WordPress Security Advisories | Hipposerve - Independent Provider
Independent Provider

Independently owned, focused on reliable hosting and personal service.

Software & WordPress Security Advisories | Hipposerve - High Performance Infrastructure
High Performance Infrastructure

Modern infrastructure designed to deliver fast, reliable website performance.

Software & WordPress Security Advisories | Hipposerve - Free SSL Certificates
Free SSL Certificates

Free SSL certificates included with every hosted website.

Software & WordPress Security Advisories | Hipposerve - Automatic Daily Backups
Automatic Daily Backups

Automatic daily backups with Hipposerve Rewind to help protect your data.

Software & WordPress Security Advisories | Hipposerve - Security First
Security First

Proactive monitoring and security features to help protect your website.

Software & WordPress Security Advisories | Hipposerve - Free Website Migration
Free Website Migration

We'll move your existing website to Hipposerve at no additional cost.

Software & WordPress Security Advisories | Hipposerve - Real Human Support
Real Human Support

Friendly technical support from real people when you need it.

Software & WordPress Security Advisories | Hipposerve - Trusted Worldwide
Trusted Worldwide

Providing reliable hosting, with 99.9% uptime, for customers around the world.

Why Wait?

Choose us—the hosting provider that makes website creation fast and effortless.