A critical flaw in Booster for WooCommerce versions up to 8.4.0 allows unauthenticated PHP object injection, posing severe risks to affected systems.
A critical vulnerability in the DirectoryPress plugin allows unauthenticated attackers to include local files, threatening full system compromise for sites running versions up to 3.6.27.
Fintech startup Ramp secures massive capital injection, significantly increasing its market value compared to earlier this year.
A severe vulnerability in the Dynamic User Directory WordPress plugin allows attackers to execute arbitrary code on affected installations.
A severe vulnerability in the Yacht Rental WordPress theme allows unauthenticated attackers to inject malicious code into sites running version 2.6 or earlier.
A critical vulnerability in the Let's Play plugin allows untrusted data deserialization, risking full server compromise for sites using versions up to 1.1.15.
A critical flaw in Privasys Enclave OS Mini allows attackers to relay TLS quotes, compromising the integrity of confidential Intel SGX applications for organisations using older versions.
A severe vulnerability in the Booklovers WordPress theme allows unauthenticated object injection, affecting all versions up to 2.13.0.
The AI firm launches an opt-in scanner that sends automated security reports without human review to participating projects.
GitHub Security Lab publishes an analysis of how bug bounty hunter @vaib25vicky selects targets and methods during security assessments.