Vulnerabilities
Critical Image Flaw in Roundcube Webmail Requires Immediate Patching
Roundcube Webmail versions before 1.6.20 and 1.7.5 have a high-severity flaw that allows unsafe image processing via ImageMagick.
ImageMagick
Everything Patch Herald has reported about ImageMagick: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 8.8: WP Photo Album Plus Command Injection Flaw Affects All Versions Up to 9.3.02.002
An authenticated command injection vulnerability in the WP Photo Album Plus plugin allows attackers to execute arbitrary code on servers running versions up to 9.3.02.002.