Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
285 results · page 4 of 6
Jul 25, 2023In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackersCVE-2023-39174 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 25, 2023In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account accessCVE-2023-39173 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent logCVE-2023-38067 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloadsCVE-2023-38066 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possibleCVE-2023-38065 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent logCVE-2023-38064 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possibleCVE-2023-38063 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurationsCVE-2023-38062 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 12, 2023In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possibleCVE-2023-38061 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jun 29, 2023JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced byCVE-2015-1313 · Other software · JetBrains · reported by MITREMedium 6.5
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbeyondbinary.iojetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possibleCVE-2023-34229 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actionsCVE-2023-34228 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.3
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacksCVE-2023-34227 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.3
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possibleCVE-2023-34226 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possibleCVE-2023-34225 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possibleCVE-2023-34224 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.8
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some casesCVE-2023-34223 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possibleCVE-2023-34222 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possibleCVE-2023-34221 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possibleCVE-2023-34220 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST APICVE-2023-34219 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 31, 2023In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possibleCVE-2023-34218 · Other software · JetBrains · reported by cve@jetbrains.comCritical 9.1
In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 27, 2023In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possibleCVE-2022-48428 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 27, 2023In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possibleCVE-2022-48427 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 27, 2023In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possibleCVE-2022-48426 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 23, 2023In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.CVE-2022-48344 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 23, 2023In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.CVE-2022-48343 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 23, 2023In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.CVE-2022-48342 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.2
In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Dec 8, 2022In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to aCVE-2022-46831 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.6
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Dec 8, 2022In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.CVE-2022-46830 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.1
In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Nov 3, 2022In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settingsCVE-2022-44646 · Other software · JetBrains · reported by cve@jetbrains.comLow 2.2
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Nov 3, 2022In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special charactersCVE-2022-44624 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Nov 3, 2022In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settingsCVE-2022-44623 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Nov 3, 2022In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessiveCVE-2022-44622 · Other software · JetBrains · reported by cve@jetbrains.comLow 2.7
In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Sep 23, 2022In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executableCVE-2022-40979 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.4
In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Aug 10, 2022In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some casesCVE-2022-38133 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.2
In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 20, 2022In JetBrains TeamCity before 2022.04.2 build parameter injection was possibleCVE-2022-36322 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2022.04.2 build parameter injection was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 20, 2022In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some casesCVE-2022-36321 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.1
In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 12, 2022In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possibleCVE-2022-29929 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.7
In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 12, 2022In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleCVE-2022-29928 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.4
In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 12, 2022In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleCVE-2022-29927 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 25, 2022In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.CVE-2022-25264 · Other software · Jetbrains · reported by MITREHigh 7.5
In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comjetbrains.com
Feb 25, 2022JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.CVE-2022-25263 · Other software · Jetbrains · reported by MITRECritical 9.8
JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comjetbrains.com
Feb 25, 2022JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.CVE-2022-25261 · Other software · Jetbrains · reported by MITREMedium 6.1
JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comjetbrains.com
Feb 25, 2022In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.CVE-2022-24342 · Other software · Jetbrains · reported by MITREHigh 8.8
In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 25, 2022In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.CVE-2022-24341 · Other software · Jetbrains · reported by MITREHigh 7.5
In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 25, 2022In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.CVE-2022-24340 · Other software · Jetbrains · reported by MITRECritical 9.8
In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 25, 2022JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.CVE-2022-24339 · Other software · Jetbrains · reported by MITREMedium 5.4
JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 25, 2022JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.CVE-2022-24338 · Other software · Jetbrains · reported by MITREMedium 6.1
JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 25, 2022In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions.CVE-2022-24337 · Other software · Jetbrains · reported by MITREMedium 6.5
In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.