Security advisories
Security advisories for Grand Strand businesses.
When a serious flaw shows up in software that local websites run on, we write up what happened, which businesses around here are exposed, and what to ask your host. Each one links to the vendor’s own announcement.
- Critical Vulnerabilities · October 22, 2026PHP2Shell: two critical PHP flaws, who they hit on the Grand Strand, and what to do todayOn October 21 the PHP project shipped emergency releases for two flaws that can let a stranger run code on a web server without logging in. PHP runs WordPress and most shared hosting, so this reaches a lot of local business sites.
- Critical Supply chain · October 22, 2026Rank Math SEO PRO shipped with malware for 11 hours. Here’s who needs to act.Some copies of Rank Math SEO PRO 3.0.123 downloaded or updated between 4:02 PM on October 15 and 3:12 AM on October 16 (Eastern) contained malware. Rank Math says any site that activated one of those copies should be treated as hacked. The free version from WordPress.org is not affected.
- Critical Vulnerabilities · October 22, 2026A flaw in WordPress itself is being exploited. Here’s how to check your site.On September 22 WordPress released a security fix for every version back to 4.7. Attackers started testing sites within hours, and on September 25 CISA added the flaw to its list of vulnerabilities being used in real attacks. Any WordPress site that hasn’t updated since is a target.
- Critical Vulnerabilities · October 22, 2026Elementor Pro 4.2.1 and older let strangers upload files through your formsA critical flaw in Elementor Pro’s form widget lets anyone upload a file to the server without logging in, if the form has a file-upload field. It was fixed in August, but we keep finding older Elementor Pro on Grand Strand business sites.
- High Network · October 22, 2026Is your office firewall or router on CISA’s exploited list?Since August, CISA has added 25 flaws in firewalls, routers, switches and remote-access boxes to its list of vulnerabilities being used in real attacks. Fortinet, SonicWall, MikroTik, Zyxel and Cisco are all on it, and these are the boxes small offices install once and never touch again.
- Critical Monthly roundup · October 22, 2026October’s critical WordPress plugin flaws, and the ones a small business is likely to runFrom October 1 to 22, our database recorded 900 new WordPress plugin and theme vulnerabilities. 59 of them are rated critical. Here are the ones in plugins local business sites actually use: forms, popups, calendars, stores and photo galleries.
Start a project
Tell us what you're building.
A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
Not ready to talk yet? Run the free website check and see what Google sees.