Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 3 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
344new WordPress flaws this week
390,080entries in the database

172 results · page 3 of 4

  • Apr 21, 2022An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.CVE-2022-28440 · Other software · Ucms Project · reported by MITREHigh 8.8

    An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2022Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter.CVE-2021-42970 · Other software · Cxuu · reported by MITREMedium 6.1

    Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 27, 2022EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.CVE-2022-26273 · Other software · Eyoucms · reported by MITRECritical 9.8

    EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 24, 2022EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata.CVE-2022-26279 · Other software · Eyoucms · reported by MITRECritical 9.8

    EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 20, 2022The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String function, whichCVE-2021-42194 · Other software · Eyoucms · reported by MITREHigh 7.2

    The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String function, which itself does not prohibit external entities, triggering a XML external entity (XXE) injection vulnerability.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 13, 2022eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename.CVE-2021-46255 · Other software · Eyoucms · reported by MITREHigh 8.1

    eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 3, 2021SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to indexCVE-2020-24000 · Other software · Eyoucms · reported by MITRECritical 9.8

    SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2021Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.CVE-2020-21653 · Other software · Myucms Project · reported by MITRECritical 9.1

    Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.

    Product
    Myucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2021Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.CVE-2020-21652 · Other software · Myucms Project · reported by MITRECritical 9.8

    Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.

    Product
    Myucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2021Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.CVE-2020-21651 · Other software · Myucms Project · reported by MITRECritical 9.8

    Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.

    Product
    Myucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2021Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.CVE-2020-21650 · Other software · Myucms Project · reported by MITREHigh 8.8

    Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.

    Product
    Myucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2021Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.CVE-2020-21649 · Other software · Myucms Project · reported by MITREHigh 8.1

    Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.

    Product
    Myucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 29, 2021A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a CVE-2020-20781 · Other software · Ucms Project · reported by MITREMedium 5.4

    A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenterCVE-2020-19157 · Other software · Wenkucms Project · reported by MITREMedium 6.1

    Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.

    Product
    Wenkucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 7, 2021EyouCMS 1.5.4 is vulnerable to Open Redirect.CVE-2021-39501 · Other software · Eyoucms · reported by MITREMedium 6.1

    EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 7, 2021Eyoucms 1.5.4 is vulnerable to Directory Traversal.CVE-2021-39500 · Other software · Eyoucms · reported by MITREHigh 7.5

    Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" to escape and write file to writeable directories.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 7, 2021A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` paCVE-2021-39499 · Other software · Eyoucms · reported by MITREMedium 6.1

    A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` parameter in bind_email function.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 7, 2021eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function.CVE-2021-39497 · Other software · Eyoucms · reported by MITRECritical 9.8

    eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 7, 2021Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS.CVE-2021-39496 · Other software · Eyoucms · reported by MITREMedium 5.4

    Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 27, 2021SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.CVE-2021-3264 · Other software · Cxuu · reported by MITREHigh 7.2

    SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 23, 2021Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in CVE-2021-39599 · Other software · Cxuu · reported by MITREMedium 6.1

    Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in admin.php.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 19, 2021Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.CVE-2020-20645 · Other software · Eyoucms · reported by MITREMedium 5.4

    Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 19, 2021Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=neCVE-2020-20642 · Other software · Eyoucms · reported by MITREHigh 8.8

    Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2021Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn.CVE-2020-19669 · Other software · Eyoucms · reported by MITREHigh 8.8

    Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2021Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.CVE-2020-28146 · Other software · Eyoucms · reported by MITREMedium 6.1

    Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 12, 2021Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.CVE-2020-18446 · Other software · Yunucms · reported by MITREMedium 4.8

    Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.

    Product
    Yunucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 12, 2021Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.CVE-2020-18445 · Other software · Yunucms · reported by MITREMedium 6.1

    Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.

    Product
    Yunucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 10, 2021A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HCVE-2020-21930 · Other software · Eyoucms · reported by MITREMedium 5.4

    A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 10, 2021A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts oCVE-2020-21929 · Other software · Eyoucms · reported by MITREMedium 5.4

    A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 23, 2021UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.CVE-2021-25809 · Other software · Ucms Project · reported by MITREMedium 5.3

    UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 27, 2020CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.CVE-2020-29250 · Other software · Cxuu · reported by MITREMedium 6.1

    CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 27, 2020CXUUCMS V3 allows class="layui-input" XSS.CVE-2020-29249 · Other software · Cxuu · reported by MITREMedium 6.1

    CXUUCMS V3 allows class="layui-input" XSS.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 25, 2020CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add.CVE-2020-35347 · Other software · Cxuu · reported by MITREMedium 6.5

    CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 25, 2020CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admiCVE-2020-35346 · Other software · Cxuu · reported by MITREMedium 4.8

    CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 30, 2020File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.CVE-2020-25537 · Other software · Ucms Project · reported by MITRECritical 9.8

    File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 18, 2020cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.CVE-2020-28091 · Other software · Cxuu · reported by MITREHigh 7.5

    cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.

    Product
    Cxuucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 23, 2020An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.CVE-2020-25483 · Other software · Ucms Project · reported by MITRECritical 9.8

    An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 22, 2020A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.CVE-2020-18129 · Other software · Eyoucms · reported by MITREHigh 8.8

    A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 4, 2020An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.CVE-2020-24981 · Other software · Ucms Project · reported by MITREMedium 5.3

    An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 12, 2019A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (aka SITE_NAME), a related issue to CVE-201CVE-2019-17522 · Other software · Hotarucms · reported by MITREMedium 4.8

    A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (aka SITE_NAME), a related issue to CVE-2011-4709.1.

    Product
    Hotarucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 10, 2019EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.CVE-2019-17430 · Other software · Eyoucms · reported by MITREMedium 6.1

    EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.

    Product
    Eyoucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 21, 2019sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.CVE-2019-12251 · Other software · Ucms Project · reported by MITREHigh 8.8

    sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 7, 2019An issue was discovered in UCMS 1.4.6.CVE-2018-16804 · Other software · Ucms Project · reported by MITREMedium 6.1

    An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 4, 2019An issue was discovered in YUNUCMS V1.1.8.CVE-2019-5311 · Other software · Yunucms · reported by MITREMedium 6.1

    An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.

    Product
    Yunucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 4, 2019YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/systCVE-2019-5310 · Other software · Yunucms · reported by MITREMedium 6.1

    YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.

    Product
    Yunucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 2018UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.CVE-2018-20601 · Other software · Ucms Project · reported by MITREMedium 4.8

    UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 2018sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.CVE-2018-20600 · Other software · Ucms Project · reported by MITREMedium 6.1

    sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 2018UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.CVE-2018-20599 · Other software · Ucms Project · reported by MITREHigh 8.8

    UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 2018UCMS 1.4.7 has ?do=user_addpost CSRF.CVE-2018-20598 · Other software · Ucms Project · reported by MITREHigh 8.8

    UCMS 1.4.7 has ?do=user_addpost CSRF.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 2018UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.CVE-2018-20597 · Other software · Ucms Project · reported by MITREMedium 4.8

    UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.

    Product
    Ucms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.