Summary
A WordPress plugin advisory describes a stored cross-site scripting risk in Media Library Assistant versions before 3.44. Here is what site owners should check.
Searching includes archived guidance. You can change this using Show.
Archived means older guidance—not that the issue is fixed or the software is safe.
407 results
A WordPress plugin advisory describes a stored cross-site scripting risk in Media Library Assistant versions before 3.44. Here is what site owners should check.
A vulnerability in MapPress can allow unauthenticated visitors to retrieve users’ email addresses and display names. Website owners should check the installed version and follow confirmed guidance before making changes.
NIST reports a medium-severity issue in Kali Forms — Contact Form & Drag-and-Drop Builder. Sites using a version before 2.4.30 should be checked, although this does not show that any particular site has been compromised.
A published security advisory concerns the Contact Form & Drag-and-Drop Builder plugin, described in the evidence as Kali Forms. Here is what site owners should check and what the finding does — and does not — mean.
A security advisory affects the Debug Log Manager plugin for WordPress in versions up to and including 2.5.2. Here is what the finding means and what to check.
A published advisory describes a high-severity SQL injection issue in Control Web Panel (CWP) versions before 1.16. Here is what to check and what the finding does—and does not—tell you.
A vulnerability has been reported in Control Web Panel (CWP) versions before 1.16. Here is what site owners and administrators should check, and what the report does—and does not—show.
A security issue has been reported in Control Web Panel versions before 1.12. It may allow an unauthenticated request to reach user-panel functions that should require sign-in.
A MariaDB server issue could allow specially crafted database objects to introduce SQL statements when generated SQL is later used. Here is what to check and how to respond calmly.
A critical vulnerability in MariaDB’s GIS handling could allow memory corruption and, in combination with another vulnerability, potentially code execution. Here is what site owners should check.
A security issue in the pypdf PDF library can cause an application to get stuck when handling specially crafted PDF-related data. Here is what to check and what to do next.
A vulnerability in the pypdf Python library could use excessive memory when processing a specially crafted PDF. Website owners should check whether their software includes an affected version.
A high-severity issue in versions of the pypdf Python library before 6.21.4 can cause processing to stop when opening a specially crafted incomplete PDF.
A high-severity issue in the open-source pypdf library affects versions before 6.18.1. It involves specially crafted PDF files and inefficient decompression, rather than evidence that a particular site has been compromised.
A flaw in older versions of the pypdf PDF library could make an application unavailable when it processes a specially crafted PDF in a particular form-processing setup.
A NIST vulnerability record says GleezCMS 1.2.0 may allow a remote attacker to obtain sensitive information. A fixed release and severity rating have not been confirmed.
A vulnerability in python-jose can bypass authentication in a specific configuration. Here is what website owners and maintainers should check.
A vulnerability in Highflame ramparts can allow a malicious skill bundle to hide code from security checks. Here is what site owners should review and do next.
A published security issue affects Aedes versions before 1.1.1. It can cause the broker process to stop when it receives an excessively deep MQTT topic.
A reported access-control flaw in Shopper could expose some non-customer profiles to authenticated staff accounts with particular permissions. Here is how to check your site and respond sensibly.
Imagine our servers as big apartment buildings, and each website hosted on it lives in its own apartment.
CageFS acts like a personal security guard for each website, ensuring that they can't peek into or mess with their neighbours' spaces.
At Hipposerve, our priority is more than just hosting—it's ensuring your digital domain remains secure.
Hipposerve® SwampGuard as a vigilant gatekeeper, while our DDoS protection and malware detection work seamlessly in the background.
We all have those “Oops!” moments, don't we? Whether it's spilling coffee or accidentally deleting a file, mistakes are a part of life.
With Hipposerve, you've got a safety net! Every single one of our hosting plans includes a rolling backup as standard.
Independently owned, focused on reliable hosting and personal service.
Modern infrastructure designed to deliver fast, reliable website performance.
Free SSL certificates included with every hosted website.
Automatic daily backups with Hipposerve Rewind to help protect your data.
Proactive monitoring and security features to help protect your website.
We'll move your existing website to Hipposerve at no additional cost.
Friendly technical support from real people when you need it.
Providing reliable hosting, with 99.9% uptime, for customers around the world.
