Browse our latest security advisories for WordPress plugins, web applications and server software. Search by product name or CVE, filter by date, type or severity, and explore older guidance in the archive. Each article explains the issue in plain English, with affected versions, sensible next steps and links to the original sources.
Clear filters

Searching includes archived guidance. You can change this using Show.
Archived means older guidance—not that the issue is fixed or the software is safe.

489 results

WordPress (318)

Summary

A security issue affects FluentCart versions up to and including 1.6.2. A fixed release has not been confirmed in the supplied information, so site owners should check their version and the publisher’s latest guidance.

AI Alt Text Generator

CVE-2026-120578
Medium
Reported: 3 Nov 2026
Summary

A published security advisory describes an authorisation bypass in the AI Alt Text Generator plugin. Here is what it means and what to check.

High
Reported: 3 Nov 2026
Summary

A security weakness has been reported in Advanced Shipment Tracking for WooCommerce. Site owners should check the installed version and follow the publisher’s current guidance.

High
Reported: 3 Nov 2026
Summary

The Contact Form Extender for Divi Builder plugin has a reported vulnerability affecting versions up to and including 1.0.6. A fixed release has not been confirmed in the supplied information.

Medium
Reported: 3 Nov 2026
Summary

A medium-severity vulnerability affects JetFormBuilder versions up to and including 3.6.2, but only under a specific JetEngine and form configuration.

Hosting and server software (11)

Froxlor

CVE-2026-121435
Medium
Reported: 3 Nov 2026
Summary

A reported vulnerability in Froxlor before version 2.3.15 could let logged-in customers create MySQL databases even when an administrator had disabled that feature.

Froxlor

CVE-2026-121436
High
Reported: 3 Nov 2026
Summary

A high-severity information-disclosure issue in Froxlor could expose API credentials to administrators with a particular permission. Here is what website owners should check.

High
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A published advisory describes a high-severity SQL injection issue in Control Web Panel (CWP) versions before 1.16. Here is what to check and what the finding does—and does not—tell you.

High
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A vulnerability has been reported in Control Web Panel (CWP) versions before 1.16. Here is what site owners and administrators should check, and what the report does—and does not—show.

High
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A security issue has been reported in Control Web Panel versions before 1.12. It may allow an unauthenticated request to reach user-panel functions that should require sign-in.

Software libraries (58)

pypdf

CVE-2026-119205
High
Reported: 29 Oct 2026Updated: 3 Nov 2026
Summary

A security issue in the pypdf PDF library can cause an application to get stuck when handling specially crafted PDF-related data. Here is what to check and what to do next.

pypdf

CVE-2026-119204
High
Reported: 29 Oct 2026Updated: 3 Nov 2026
Summary

A vulnerability in the pypdf Python library could use excessive memory when processing a specially crafted PDF. Website owners should check whether their software includes an affected version.

pypdf

CVE-2026-119203
High
Reported: 29 Oct 2026Updated: 3 Nov 2026
Summary

A high-severity issue in versions of the pypdf Python library before 6.21.4 can cause processing to stop when opening a specially crafted incomplete PDF.

pypdf

CVE-2026-113791
Medium
Reported: 21 Oct 2026Updated: 3 Nov 2026
Summary

A vulnerability in the pypdf PDF library could make specially crafted documents consume unusually large amounts of memory while being read.

pypdf

CVE-2026-102997
High
Reported: 30 Sep 2026Updated: 3 Nov 2026
Summary

A high-severity issue in the open-source pypdf library affects versions before 6.18.1. It involves specially crafted PDF files and inefficient decompression, rather than evidence that a particular site has been compromised.

Other software (102)

High
Reported: 3 Nov 2026
Summary

A high-severity vulnerability has been reported in Volmarg Personal Management System through version 2.1.0. Here is what site owners and maintainers should check.

Cotonti

CVE-2026-121553
Medium
Reported: 3 Nov 2026
Summary

A vulnerability in Cotonti through version 1.0.0 could let an attacker predict validation tokens used for account registration and email changes. Here is what that means for site owners.

GleezCMS

CVE-2026-117127
Unrated
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A NIST vulnerability record says GleezCMS 1.2.0 may allow a remote attacker to obtain sensitive information. A fixed release and severity rating have not been confirmed.

python-jose

CVE-2026-120459
Critical
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A vulnerability in python-jose can bypass authentication in a specific configuration. Here is what website owners and maintainers should check.

PandaWiki

CVE-2026-120428
Medium
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A published security advisory affects PandaWiki releases from 3.65.0 through 3.87.5. Here is what site owners should check, without assuming that an affected version has been compromised.

Always Watching. Always Protecting.

Hipposerve® SwampGuard

Hipposerve® SwampGuard is our intelligent security monitoring platform, continuously analysing traffic, identifying threats, and helping protect your website and hosting services before problems become incidents.
Hipposerve® Sentinel security team illustration featuring PippA and Hipposerve mascots monitoring hosting infrastructure, analysing security data, and protecting websites from online threats in a modern office environment.
Software & WordPress Security Advisories | Hipposerve - CloudLinux with CageFS
CloudLinux with CageFS

Imagine our servers as big apartment buildings, and each website hosted on it lives in its own apartment.

CageFS acts like a personal security guard for each website, ensuring that they can't peek into or mess with their neighbours' spaces.

Software & WordPress Security Advisories | Hipposerve - Proactive Web Defence
Proactive Web Defence

At Hipposerve, our priority is more than just hosting—it's ensuring your digital domain remains secure.

Hipposerve® SwampGuard as a vigilant gatekeeper, while our DDoS protection and malware detection work seamlessly in the background.

Software & WordPress Security Advisories | Hipposerve - Site Backup Included
Site Backup Included

We all have those “Oops!” moments, don't we? Whether it's spilling coffee or accidentally deleting a file, mistakes are a part of life.

With Hipposerve, you've got a safety net! Every single one of our hosting plans includes a rolling backup as standard.

Why Choose Hipposerve?


Software & WordPress Security Advisories | Hipposerve - Independent Provider
Independent Provider

Independently owned, focused on reliable hosting and personal service.

Software & WordPress Security Advisories | Hipposerve - High Performance Infrastructure
High Performance Infrastructure

Modern infrastructure designed to deliver fast, reliable website performance.

Software & WordPress Security Advisories | Hipposerve - Free SSL Certificates
Free SSL Certificates

Free SSL certificates included with every hosted website.

Software & WordPress Security Advisories | Hipposerve - Automatic Daily Backups
Automatic Daily Backups

Automatic daily backups with Hipposerve Rewind to help protect your data.

Software & WordPress Security Advisories | Hipposerve - Security First
Security First

Proactive monitoring and security features to help protect your website.

Software & WordPress Security Advisories | Hipposerve - Free Website Migration
Free Website Migration

We'll move your existing website to Hipposerve at no additional cost.

Software & WordPress Security Advisories | Hipposerve - Real Human Support
Real Human Support

Friendly technical support from real people when you need it.

Software & WordPress Security Advisories | Hipposerve - Trusted Worldwide
Trusted Worldwide

Providing reliable hosting, with 99.9% uptime, for customers around the world.

Why Wait?

Choose us—the hosting provider that makes website creation fast and effortless.