Browse our latest security advisories for WordPress plugins, web applications and server software. Search by product name or CVE, filter by date, type or severity, and explore older guidance in the archive. Each article explains the issue in plain English, with affected versions, sensible next steps and links to the original sources.
Clear filters

Searching includes archived guidance. You can change this using Show.
Archived means older guidance—not that the issue is fixed or the software is safe.

532 results

WordPress (337)

Unrated
Reported: 4 Nov 2026
Summary

A reported vulnerability affects Stape Conversion Tracking versions before 2.3.11. Here is what site owners should check, without assuming that an affected version has been compromised.

EventPrime

CVE-2026-118523
Unrated
Reported: 4 Nov 2026
Summary

A published security notice says EventPrime versions before 4.3.6.1 may expose content marked as awaiting review to people who are not signed in.

Unrated
Reported: 4 Nov 2026
Summary

A reported issue could expose the title and description of non-public posts to users with relatively limited WordPress permissions. Website owners should check the installed plugin version and the publisher’s current guidance.

Unrated
Reported: 4 Nov 2026
Summary

A security advisory affects All-in-One Video Gallery versions before 5.0.0. Here is what the finding means and the sensible next steps for site owners.

VikWidgetsLoader

CVE-2026-118983
Unrated
Reported: 4 Nov 2026
Summary

A published vulnerability affects versions of the VikWidgetsLoader WordPress plugin before 1.12.3. Here is what site owners should check and why the finding does not by itself show that a site has been compromised.

Hosting and server software (16)

Froxlor

CVE-2026-121435
Medium
Reported: 3 Nov 2026
Summary

A reported vulnerability in Froxlor before version 2.3.15 could let logged-in customers create MySQL databases even when an administrator had disabled that feature.

Froxlor

CVE-2026-121436
High
Reported: 3 Nov 2026
Summary

A high-severity information-disclosure issue in Froxlor could expose API credentials to administrators with a particular permission. Here is what website owners should check.

Medium
Reported: 2 Nov 2026Updated: 4 Nov 2026
Summary

A medium-severity issue in Control Web Panel affects versions before 1.29. There is no confirmed fixed release in the available evidence, so site owners should check the publisher’s current guidance before making changes.

High
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A published advisory describes a high-severity SQL injection issue in Control Web Panel (CWP) versions before 1.16. Here is what to check and what the finding does—and does not—tell you.

High
Reported: 2 Nov 2026Updated: 3 Nov 2026
Summary

A vulnerability has been reported in Control Web Panel (CWP) versions before 1.16. Here is what site owners and administrators should check, and what the report does—and does not—show.

Software libraries (56)

pypdf

CVE-2026-71852
Medium
Reported: 7 Aug 2026Updated: 3 Nov 2026
Summary

A published medium-severity issue affects pypdf versions before 6.15.0. It concerns how specially crafted PDFs may consume excessive processing time and memory during text extraction.

pypdf

CVE-2026-59935
High
Reported: 8 Jul 2026Updated: 3 Nov 2026
Summary

A high-severity flaw in the pypdf PDF library could make parsing a specially crafted document run indefinitely. Here is what to check and how to respond calmly.

pypdf

CVE-2026-59936
High
Reported: 8 Jul 2026Updated: 3 Nov 2026
Summary

A high-severity issue affects pypdf versions before 6.14.1. It concerns specially crafted PDFs and may cause an endless loop during some processing tasks.

pypdf

CVE-2026-59938
Medium
Reported: 8 Jul 2026Updated: 3 Nov 2026
Summary

A security notice concerns pypdf, a Python library used to work with PDF files. Here is what it means for websites and applications that may include it.

pypdf

CVE-2026-59937
Medium
Reported: 8 Jul 2026Updated: 3 Nov 2026
Summary

A reported issue can make pypdf spend a long time recovering malformed PDF data. Here is what site owners and developers should check.

Other software (123)

OPNsense core

CVE-2026-119560
Medium
Reported: 30 Oct 2026Updated: 3 Nov 2026
Summary

A reported vulnerability in OPNsense core affects versions up to and including 26.7.8. Here is what it means for administrators and site owners.

phpmyadmin, phpMyAdmin

CVE-2026-119561
High
Reported: 30 Oct 2026Updated: 3 Nov 2026
Summary

A reported authentication-bypass weakness affects phpMyAdmin versions up to and including 5.2.3. Here is what to check and how to respond calmly.

Moodle

CVE-2026-119553
High
Reported: 30 Oct 2026Updated: 3 Nov 2026
Summary

A path traversal vulnerability in Moodle’s Blackboard question import format could allow authorised users with particular teaching permissions to copy server files into a draft area. The affected version list does not confirm that any individual site has been compromised.

phpmyadmin, phpMyAdmin

CVE-2026-119428
Medium
Reported: 30 Oct 2026Updated: 3 Nov 2026
Summary

A medium-severity vulnerability has been reported in phpMyAdmin versions up to and including 5.2.3. Here is what to check and how to respond calmly.

phpmyadmin, phpMyAdmin

CVE-2026-119429
Medium
Reported: 30 Oct 2026Updated: 3 Nov 2026
Summary

A reported security weakness in phpMyAdmin through version 5.2.3 could let an attacker with an already hijacked session remove two-factor authentication from that session’s account settings.

Always Watching. Always Protecting.

Hipposerve® SwampGuard

Hipposerve® SwampGuard is our intelligent security monitoring platform, continuously analysing traffic, identifying threats, and helping protect your website and hosting services before problems become incidents.
Hipposerve® Sentinel security team illustration featuring PippA and Hipposerve mascots monitoring hosting infrastructure, analysing security data, and protecting websites from online threats in a modern office environment.
Software & WordPress Security Advisories | Hipposerve - CloudLinux with CageFS
CloudLinux with CageFS

Imagine our servers as big apartment buildings, and each website hosted on it lives in its own apartment.

CageFS acts like a personal security guard for each website, ensuring that they can't peek into or mess with their neighbours' spaces.

Software & WordPress Security Advisories | Hipposerve - Proactive Web Defence
Proactive Web Defence

At Hipposerve, our priority is more than just hosting—it's ensuring your digital domain remains secure.

Hipposerve® SwampGuard as a vigilant gatekeeper, while our DDoS protection and malware detection work seamlessly in the background.

Software & WordPress Security Advisories | Hipposerve - Site Backup Included
Site Backup Included

We all have those “Oops!” moments, don't we? Whether it's spilling coffee or accidentally deleting a file, mistakes are a part of life.

With Hipposerve, you've got a safety net! Every single one of our hosting plans includes a rolling backup as standard.

Why Choose Hipposerve?


Software & WordPress Security Advisories | Hipposerve - Independent Provider
Independent Provider

Independently owned, focused on reliable hosting and personal service.

Software & WordPress Security Advisories | Hipposerve - High Performance Infrastructure
High Performance Infrastructure

Modern infrastructure designed to deliver fast, reliable website performance.

Software & WordPress Security Advisories | Hipposerve - Free SSL Certificates
Free SSL Certificates

Free SSL certificates included with every hosted website.

Software & WordPress Security Advisories | Hipposerve - Automatic Daily Backups
Automatic Daily Backups

Automatic daily backups with Hipposerve Rewind to help protect your data.

Software & WordPress Security Advisories | Hipposerve - Security First
Security First

Proactive monitoring and security features to help protect your website.

Software & WordPress Security Advisories | Hipposerve - Free Website Migration
Free Website Migration

We'll move your existing website to Hipposerve at no additional cost.

Software & WordPress Security Advisories | Hipposerve - Real Human Support
Real Human Support

Friendly technical support from real people when you need it.

Software & WordPress Security Advisories | Hipposerve - Trusted Worldwide
Trusted Worldwide

Providing reliable hosting, with 99.9% uptime, for customers around the world.

Why Wait?

Choose us—the hosting provider that makes website creation fast and effortless.