Browse our latest security advisories for WordPress plugins, web applications and server software. Search by product name or CVE, filter by date, type or severity, and explore older guidance in the archive. Each article explains the issue in plain English, with affected versions, sensible next steps and links to the original sources.
Clear filters

Searching includes archived guidance. You can change this using Show.
Archived means older guidance—not that the issue is fixed or the software is safe.

1069 results

WordPress (421)

Unrated
Reported: 5 Nov 2026
Summary

A published advisory describes a content-access problem in the Subscriptions for WooCommerce plugin. Here is how to check whether it affects your site and what to do next.

LiteSpeed Cache

CVE-2026-93389
High
Reported: 5 Nov 2026
Summary

A high-severity issue could expose private WooCommerce shopper data when a particular cache setting is enabled. Here is what site owners and maintainers should check.

Redux Framework

CVE-2026-120533
Medium
Reported: 5 Nov 2026
Summary

A medium-severity security issue has been recorded in Redux Framework. It affects certain plugin versions and depends on specific theme settings, so site owners should check their installation rather than assume compromise.

Medium
Reported: 5 Nov 2026
Summary

A medium-severity issue affects the Customer Reviews for WooCommerce WordPress plugin. It concerns stored cross-site scripting and requires an authenticated account with contributor-level access or above.

High
Reported: 5 Nov 2026
Summary

A vulnerability identified as CVE-2026-116617 can allow an authenticated user with Subscriber-level access or above to delete certain image files belonging to other users. Check the affected-versions table and follow the publisher’s current guidance.

Hosting and server software (23)

High
Reported: 9 Oct 2026Updated: 4 Nov 2026
Summary

A MariaDB server weakness could allow a specially authorised database account to gain higher privileges. Here is how to check your setup calmly and safely.

Medium
Reported: 9 Oct 2026Updated: 4 Nov 2026
Summary

A published security issue affects certain MariaDB server releases. It depends on a particular database permission and account setup, so checking the installed software version is the sensible first step.

High
Reported: 9 Oct 2026Updated: 3 Nov 2026
Summary

A vulnerability in MariaDB server concerns how binary FRM metadata is validated. The published evidence describes a possible route to a crash or code execution when a specially crafted file is placed in the database data directory.

High
Reported: 9 Oct 2026Updated: 4 Nov 2026
Summary

A high-severity MariaDB security issue could affect certain database installations. Here is what to check, and how to approach an update safely.

Medium
Reported: 9 Oct 2026Updated: 4 Nov 2026
Summary

A flaw in MariaDB’s handling of imported MySQL tables could expose information or crash a database server. Check the affected-versions table and the publisher’s remediation guidance.

Web applications (2)

Medium
Reported: 28 Oct 2026Updated: 3 Nov 2026
Summary

A medium-severity authorisation issue could allow an unauthenticated visitor to view unpublished job-position details in affected Dolibarr installations. Here is what site owners should check.

High
Reported: 26 Oct 2026Updated: 4 Nov 2026
Summary

A reported vulnerability affects Dolibarr ERP CRM versions before 24.0.0. It requires administrator authentication, but could allow operating-system commands to be run as the web server user.

Software libraries (62)

svg-sanitizer

CVE-2026-121443
Medium
Reported: 3 Nov 2026
Summary

A published advisory describes a medium-severity denial-of-service issue in certain versions of svg-sanitizer. Here is what site owners should check and do next.

svg-sanitizer

CVE-2026-121444
High
Reported: 3 Nov 2026
Summary

A high-severity vulnerability in svg-sanitizer could make a website’s PHP workers spend excessive time processing a specially prepared SVG file. Here is what to check and what the available evidence does—and does not—show.

pypdf

CVE-2026-119209
High
Reported: 29 Oct 2026Updated: 3 Nov 2026
Summary

A security issue in older versions of the open-source pypdf library could make an application use excessive memory when opening a specially crafted PDF. Here is how to check whether it is relevant to your site or software.

pypdf

CVE-2026-119208
High
Reported: 29 Oct 2026Updated: 4 Nov 2026
Summary

A high-severity issue in pypdf can cause excessive processing and memory use when an application reads the page count of a specially crafted encrypted PDF.

pypdf

CVE-2026-119207
High
Reported: 29 Oct 2026Updated: 3 Nov 2026
Summary

A flaw in the Python PDF library pypdf can cause excessive memory use when it processes a specially malformed PDF. Here is how to check what your site or application uses.

Other software (561)

linux_kernel

CVE-2024-26866
Medium
Reported: 17 Apr 2024Updated: 4 Nov 2026
Summary

A medium-severity Linux kernel vulnerability has been recorded under CVE-2024-26866. Here is how to check whether it is relevant to a server or other system you manage.

linux_kernel

CVE-2024-26869
High
Reported: 17 Apr 2024Updated: 4 Nov 2026
Summary

A high-severity Linux kernel issue could cause data corruption in a particular storage filesystem under a race condition. Here is how to check your system sensibly.

linux_kernel

CVE-2024-26873
Medium
Reported: 17 Apr 2024Updated: 4 Nov 2026
Summary

A medium-severity Linux kernel issue can cause a system task to become stuck in a particular storage-controller situation. Here is how to assess it calmly.

linux_kernel

CVE-2024-26876
Medium
Reported: 17 Apr 2024Updated: 4 Nov 2026
Summary

A medium-severity Linux kernel issue can cause a crash during device setup in a specific display and audio component. Here is what website owners and maintainers should check.

linux_kernel

CVE-2024-26670
Medium
Reported: 2 Apr 2024Updated: 4 Nov 2026
Summary

A reported Linux kernel issue affects certain arm64 kernel builds. Here is what administrators should check, without assuming that an affected build has been compromised.

Always Watching. Always Protecting.

Hipposerve® SwampGuard

Hipposerve® SwampGuard is our intelligent security monitoring platform, continuously analysing traffic, identifying threats, and helping protect your website and hosting services before problems become incidents.
Hipposerve® Sentinel security team illustration featuring PippA and Hipposerve mascots monitoring hosting infrastructure, analysing security data, and protecting websites from online threats in a modern office environment.
Software & WordPress Security Advisories | Hipposerve - CloudLinux with CageFS
CloudLinux with CageFS

Imagine our servers as big apartment buildings, and each website hosted on it lives in its own apartment.

CageFS acts like a personal security guard for each website, ensuring that they can't peek into or mess with their neighbours' spaces.

Software & WordPress Security Advisories | Hipposerve - Proactive Web Defence
Proactive Web Defence

At Hipposerve, our priority is more than just hosting—it's ensuring your digital domain remains secure.

Hipposerve® SwampGuard as a vigilant gatekeeper, while our DDoS protection and malware detection work seamlessly in the background.

Software & WordPress Security Advisories | Hipposerve - Site Backup Included
Site Backup Included

We all have those “Oops!” moments, don't we? Whether it's spilling coffee or accidentally deleting a file, mistakes are a part of life.

With Hipposerve, you've got a safety net! Every single one of our hosting plans includes a rolling backup as standard.

Why Choose Hipposerve?


Software & WordPress Security Advisories | Hipposerve - Independent Provider
Independent Provider

Independently owned, focused on reliable hosting and personal service.

Software & WordPress Security Advisories | Hipposerve - High Performance Infrastructure
High Performance Infrastructure

Modern infrastructure designed to deliver fast, reliable website performance.

Software & WordPress Security Advisories | Hipposerve - Free SSL Certificates
Free SSL Certificates

Free SSL certificates included with every hosted website.

Software & WordPress Security Advisories | Hipposerve - Automatic Daily Backups
Automatic Daily Backups

Automatic daily backups with Hipposerve Rewind to help protect your data.

Software & WordPress Security Advisories | Hipposerve - Security First
Security First

Proactive monitoring and security features to help protect your website.

Software & WordPress Security Advisories | Hipposerve - Free Website Migration
Free Website Migration

We'll move your existing website to Hipposerve at no additional cost.

Software & WordPress Security Advisories | Hipposerve - Real Human Support
Real Human Support

Friendly technical support from real people when you need it.

Software & WordPress Security Advisories | Hipposerve - Trusted Worldwide
Trusted Worldwide

Providing reliable hosting, with 99.9% uptime, for customers around the world.

Why Wait?

Choose us—the hosting provider that makes website creation fast and effortless.