Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
35added in the last 30 days
570new WordPress flaws this week
391,310entries in the database

3,318 results · page 42 of 67

  • Feb 14, 2022Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.CVE-2022-0569 · Other software · snipe · reported by security@huntr.devMedium 5.3

    Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.

    Product
    snipe/snipe-it
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 14, 2022Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.CVE-2022-0565 · Other software · pimcore · reported by security@huntr.devHigh 7.6

    Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 11, 2022A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute CVE-2021-46362 · Other software · Magnolia-cms · reported by MITRECritical 9.8

    A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter.

    Product
    Magnolia CMS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 11, 2022Open Redirect in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0560 · Other software · microweber · reported by security@huntr.devMedium 6.1

    Open Redirect in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 11, 2022Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon IndustriaCVE-2021-35075 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.4

    Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

    Product
    Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 11, 2022OS Command Injection in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0557 · Other software · microweber · reported by security@huntr.devHigh 7.2

    OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 10, 2022Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0558 · Other software · microweber · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 9, 2022Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.CVE-2022-0539 · Other software · ptrofimov · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.

    Product
    ptrofimov/beanstalk_console
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 8, 2022Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.CVE-2022-0510 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 8, 2022Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.CVE-2022-0509 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 8, 2022Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0506 · Other software · microweber · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 8, 2022Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0505 · Other software · microweber · reported by security@huntr.devMedium 6.5

    Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 8, 2022Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0504 · Other software · microweber · reported by security@huntr.devMedium 6.5

    Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 6, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0502 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 5, 2022Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.CVE-2022-0501 · Other software · ptrofimov · reported by security@huntr.devMedium 6.1

    Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.

    Product
    ptrofimov/beanstalk_console
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 4, 2022Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.CVE-2022-0472 · Other software · jsdecena · reported by security@huntr.devMedium 5.4

    Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.

    Product
    jsdecena/laracom
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 1, 2022Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users.CVE-2021-44451 · Websites & servers · Apache Software Foundation · reported by security@apache.orgMedium 6.5

    Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.

    Product
    Apache Superset
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 1, 2022RegistrationMagic: Does not sanitise and escape the rm_search_value parameter before outputting back in an attributeCVE-2021-24648 · WordPress plugins & themes · reported by WPScanMedium 6.1

    The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

    Product
    RegistrationMagic
    Fixed in
    5.0.1.9
    What to do
    Update RegistrationMagic to 5.0.1.9 or newer.
  • Jan 31, 2022Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromCVE-2020-36064 · Other software · Online Course Registration Project · reported by MITRECritical 9.8

    Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.

    Product
    Online Course Registration
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 31, 2022Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.CVE-2022-0414 · Other software · dolibarr · reported by security@huntr.devMedium 4.3

    Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.

    Product
    dolibarr/dolibarr
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 28, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0395 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 28, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0394 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 27, 2022Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.CVE-2022-0348 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 27, 2022Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.CVE-2022-0372 · Other software · crater-invoice · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.

    Product
    crater-invoice/crater
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 27, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0387 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 27, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0370 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2022Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0379 · Other software · microweber · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2022Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0378 · Other software · microweber · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2022SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.CVE-2022-0362 · Other software · star7th · reported by security@huntr.devCritical 9.8

    SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

    Product
    star7th/showdoc
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0375 · Other software · livehelperchat · reported by security@huntr.devMedium 4.8

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2022Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.CVE-2022-0374 · Other software · livehelperchat · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 25, 2022uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration information" input box.CVE-2021-46084 · Other software · Uscat Project · reported by MITREMedium 5.4

    uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration information" input box.

    Product
    Uscat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 25, 2022Missing authentication on ShenYu Admin when register by HTTP.CVE-2022-23945 · Websites & servers · Apache Software Foundation · reported by security@apache.orgHigh 7.5

    Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

    Product
    Apache ShenYu (incubating)
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 25, 2022Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.CVE-2022-0268 · Other software · getgrav · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.

    Product
    getgrav/grav
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 24, 2022Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.CVE-2022-0269 · Other software · yetiforcecompany · reported by security@huntr.devHigh 8

    Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

    Product
    yetiforcecompany/yetiforcecrm
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 24, 2022Registrations for the Events Calendar: Does not escape the qtype parameter before outputting it back in an attribute in the settings pageCVE-2021-25083 · WordPress plugins & themes · reported by WPScanMedium 6.1

    The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the settings page, leading to a Reflected Cross-Site Scripting

    Product
    Registrations for the Events Calendar
    Fixed in
    2.7.10
    What to do
    Update Registrations for the Events Calendar to 2.7.10 or newer.
  • Jan 21, 2022An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c.CVE-2021-46237 · Other software · Gpac · reported by MITREMedium 5.5

    An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).

    Product
    Gpac
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 21, 2022A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c.CVE-2021-46234 · Other software · Gpac · reported by MITREMedium 5.5

    A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).

    Product
    Gpac
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 21, 2022An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed verCVE-2021-23207 · Other software · Fresenius Kabi · reported by ics-cert@hq.dhs.govMedium 6.5

    An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.

    Product
    Vigilant Software Suite (Mastermed Dashboard)
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 21, 2022Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.CVE-2022-0323 · Other software · bobthecow · reported by security@huntr.devHigh 8.8

    Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

    Product
    bobthecow/mustache.php
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beCVE-2020-23315 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5

    There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.

    Product
    Chakracore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phonCVE-2021-44091 · Other software · Multi Restaurant Table Reservation System Project · reported by MITREMedium 5.4

    A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters.

    Product
    Multi Restaurant Table Reservation System
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.CVE-2022-0285 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0282 · Other software · microweber · reported by security@huntr.devMedium 4.3

    Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0281 · Other software · microweber · reported by security@huntr.devHigh 7.5

    Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0278 · Other software · microweber · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 20, 2022Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0277 · Other software · microweber · reported by security@huntr.devMedium 6.5

    Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

    Product
    microweber/microweber
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 19, 2022jpress v4.2.0 allows users to register an account by default.CVE-2021-45808 · Other software · Jpress · reported by MITREHigh 8.8

    jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

    Product
    Jpress
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 19, 2022Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.CVE-2022-0266 · Other software · livehelperchat · reported by security@huntr.devMedium 6.6

    Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.

    Product
    livehelperchat/livehelperchat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 18, 2022User Registration, Login & Landing Pages: Stored Cross-Site ScriptingCVE-2022-0232 · WordPress plugins & themes · reported by WordfenceMedium 4.8

    The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.2.7. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.

    Product
    User Registration, Login & Landing Pages
    Affected
    up to 1.2.7
    What to do
    Affects up to 1.2.7. Update User Registration, Login & Landing Pages to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.