web-security

Cybersecurity 4 min A Wiki Add-On Was Fixed Quietly. Attacks Began a Day After the Flaw Was Made Public. CVE-2026-100382 in MediaWiki's External Data extension lets anyone run commands on a wiki's server. Bots plant... KE Kenji Tanaka 1 Oct Developer Tools 6 min Five Critical WordPress Flaws, and None of Them Needs an Account Most WordPress advisories describe flaws that need an account first. These five do not, which is what a 9.8 is... MA Maya Lin 31 Aug Cybersecurity 6 min Joomla JCE Flaw CVE-2026-48907 (CVSS 10.0) Is Being Actively Exploited — Patch and Check for Compromise CISA added CVE-2026-48907, a maximum-severity flaw in the Widget Factory Joomla Content Editor extension (JCE... CY Cyber Team 19 Jun