Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
185 results · page 3 of 4
Jul 10, 2022The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is usCVE-2022-31554 · Other software · Movie-review-sentiment-analysis Project · reported by MITRECritical 9.3
The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Movie-review-sentiment-analysis
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31553 · Other software · Sleep Learner Project · reported by MITRECritical 9.3
The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Sleep Learner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31552 · Other software · Anuvaad-corpus Project · reported by MITRECritical 9.3
The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Anuvaad-corpus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31551 · Other software · Flask-mongo-skel Project · reported by MITRECritical 9.3
The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Flask-mongo-skel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31550 · Other software · Python Athena Stack Project · reported by MITRECritical 9.3
The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Python Athena Stack
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31549 · Other software · Helm-flask-celery Project · reported by MITRECritical 9.3
The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Helm-flask-celery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31548 · Other software · Homepage Project · reported by MITRECritical 9.3
The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Homepage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31547 · Other software · Sphere Project · reported by MITRECritical 9.3
The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Sphere
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31546 · Other software · Glance Project · reported by MITRECritical 9.3
The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Glance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31545 · Other software · Modelconverter Project · reported by MITRECritical 9.3
The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Modelconverter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31544 · Other software · Xtomo · reported by MITRECritical 9.3
The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Robo-tom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31543 · Other software · Setupbox Project · reported by MITRECritical 9.3
The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Setupbox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31542 · Other software · Mdweb Project · reported by MITRECritical 9.3
The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mdweb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31541 · Other software · Barry Voice Assistant Project · reported by MITRECritical 9.3
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Barry Voice Assistant
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafeCVE-2022-31540 · Other software · Hin-eng-preprocessing Project · reported by MITRECritical 9.3
The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Hin-eng-preprocessing
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31539 · Other software · Kotekan Project · reported by MITRECritical 9.3
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Kotekan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31538 · Other software · Mp-m08-interface Project · reported by MITRECritical 9.3
The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mp-m08-interface
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafeCVE-2022-31537 · Other software · Solar-system-simulator Project · reported by MITRECritical 9.3
The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Solar-system-simulator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31536 · Other software · Ytdl-sync Project · reported by MITRECritical 9.3
The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Ytdl-sync
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31535 · Other software · Fishtank Project · reported by MITRECritical 9.3
The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Fishtank
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31534 · Other software · Pythonweb Project · reported by MITRECritical 9.3
The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Pythonweb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31533 · Other software · Umbral Project · reported by MITRECritical 9.3
The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Umbral
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31532 · Other software · Travel Blahg Project · reported by MITRECritical 9.3
The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Travel Blahg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31531 · Other software · Dainst · reported by MITRECritical 9.3
The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Cilantro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31530 · Other software · CSM Server Project · reported by MITRECritical 9.3
The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- CSM Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31529 · Other software · Monorepo Project · reported by MITRECritical 9.3
The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Monorepo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used uCVE-2022-31528 · Other software · Bonn Activity Maps Annotation Tool Project · reported by MITRECritical 9.3
The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Bonn Activity Maps Annotation Tool
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31527 · Other software · Flask-file-server Project · reported by MITRECritical 9.3
The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Flask-file-server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31526 · Other software · Thunderatz · reported by MITRECritical 9.3
The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Thunderdocs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31525 · Other software · Deep Learning Studio Project · reported by MITRECritical 9.3
The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Deep Learning Studio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31524 · Other software · Purestorage · reported by MITRECritical 9.3
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Pure Swagger
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31523 · Other software · Paddlepaddle · reported by MITRECritical 9.3
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Anakin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31522 · Other software · Karaokey Project · reported by MITRECritical 9.3
The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Karaokey
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31521 · Other software · Mosaic Project · reported by MITRECritical 9.3
The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mosaic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafelyCVE-2022-31520 · Other software · Logstash-management-api Project · reported by MITRECritical 9.3
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Logstash-management-api
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31519 · Other software · Windmill Project · reported by MITRECritical 9.3
The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Windmill
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file functCVE-2022-31518 · Other software · Python-recipe-database Project · reported by MITRECritical 9.3
The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Python-recipe-database
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31517 · Other software · Mercury Sample Manager Project · reported by MITRECritical 9.3
The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mercury Sample Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31516 · Other software · Harveyzyh Python Project · reported by MITRECritical 9.3
The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Harveyzyh Python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31515 · Other software · Carceresbe Project · reported by MITRECritical 9.3
The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Carceresbe
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31514 · Other software · FAN Platform Project · reported by MITRECritical 9.3
The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- FAN Platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31513 · Other software · Krypton Project · reported by MITRECritical 9.3
The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Krypton
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31512 · Other software · Flask-mvc Project · reported by MITRECritical 9.3
The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Flask-mvc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31511 · Other software · Equanimity Project · reported by MITRECritical 9.3
The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Equanimity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31510 · Other software · Simple-rat Project · reported by MITRECritical 9.3
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Simple-rat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31509 · Other software · Iedadata · reported by MITRECritical 9.3
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Usap-dc Web Submission And Dataset Search
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31508 · Other software · Idayrus · reported by MITRECritical 9.3
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- E-voting
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31507 · Other software · Ganga Project · reported by MITRECritical 9.3
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Ganga
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31506 · Other software · CMU · reported by MITRECritical 9.3
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Opendiamond
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31505 · Other software · Mercadoenlineaback Project · reported by MITRECritical 9.3
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mercadoenlineaback
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.