Vulnerabilities
CVSS 9.8: Tonda Membership 1.0.1 CWE-266 Flaw Enables Unauthenticated Full Control
A CVSS 9.8 critical vulnerability in Tonda Membership versions 1.0.1 and below lets attackers gain full control without logging in.
WordPress
Everything Patch Herald has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
WordPress 7.1.3 Fixes Seven Security Issues; Users Urged to Update Sites Immediately
The latest maintenance release for WordPress resolves seven security vulnerabilities and four bugs. Site owners should apply the update now to protect their platforms.