vulnerability Archives

Home vulnerability

A dark server room with a red alert on a monitor highlighting the Forminator vulnerability CVE-2026-15748 file upload risk.

July 31, 2026

Forminator vulnerability CVE-2026-15748 patched in 1.56.2

Forminator patched an unauthenticated file-upload flaw in version 1.56.2, but over 300,000 sites are still running vulnerable versions. The week also saw 198 WordPress vulnerabilities disclosed.

Security

Laptop in a dark server room showing update logs during the WordPress 7.0.2 security release

ByWP Gazette

July 17, 2026

WordPress 7.0.2 Security Release Forces Updates Tonight

WordPress 7.0.2 shipped on 17 July 2026 to patch a broken access control flaw and an SQL injection that chain into unauthenticated remote code execution. WordPress.org has turned on forced updates, but you still need to verify every site yourself.

Security

A code editor screen showing a plugin changelog with a padlock icon, illustrating the ACF 6.8.6 security release.

ByWP Gazette

July 14, 2026

ACF 6.8.6 Security Release Patches Three Flaws

ACF 6.8.6 is a security release that patches form save handlers, AJAX search permissions and User field REST responses. Here's what shipped and why you should update.

Security