By Month

Sept 2026
Aug 2026
Jul 2026
Dec 2025
Apr 2024
Mar 2024
Older Announcements...
View RSS Feed

  By Month

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket

Announcements

MA-1480.082026: MyCERT Advisory - Malicious Fake Park@Perak Parking Website Targeting iPhone Users

  • 31st August 2026
Continue reading

CVE-2026-15980 (matched: wordpress)

  • 31st August 2026
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJAX handler and improper token validation in the activate() function. This makes it possible for unauthenticated attackers to generate an activation token for an ...
Continue reading

CVE-2026-15369 (matched: wordpress)

  • 31st August 2026
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the ...
Continue reading

CVE-2026-14494 (matched: wordpress)

  • 31st August 2026
The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission function. This is due to the plugin dynamically granting the unfiltered_upload capability to all users during form submissions and bypassing MIME type validation when allowed_file_types is not ...
Continue reading

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket