Updated 4 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list

35added in the last 30 days

479new WordPress flaws this week

390,525entries in the database

488 results · page 8 of 10

Aug 1, 2019cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).CVE-2018-20902 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).CVE-2018-20901 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).CVE-2016-10860 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).CVE-2016-10859 · Websites & servers · Cpanel · reported by MITREHigh 8.1
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).CVE-2016-10858 · Websites & servers · Cpanel · reported by MITRECritical 9.8
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).CVE-2016-10857 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).CVE-2016-10856 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).CVE-2016-10855 · Websites & servers · Cpanel · reported by MITRECritical 9.8
cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87).CVE-2016-10854 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).CVE-2016-10853 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).CVE-2016-10852 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).CVE-2016-10851 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).CVE-2016-10850 · Websites & servers · Cpanel · reported by MITREHigh 8.8
cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net forums.cpanel.net
Aug 1, 2019cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).CVE-2015-9291 · Websites & servers · Cpanel · reported by MITREHigh 7.5
cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).CVE-2018-20900 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).CVE-2018-20899 · Websites & servers · Cpanel · reported by MITREMedium 6.1
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).CVE-2018-20898 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).CVE-2018-20897 · Websites & servers · Cpanel · reported by MITRELow 2.8
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).CVE-2018-20896 · Websites & servers · Cpanel · reported by MITRELow 3.9
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).CVE-2018-20895 · Websites & servers · Cpanel · reported by MITREHigh 7.2
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).CVE-2018-20894 · Websites & servers · Cpanel · reported by MITRELow 3.3
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).CVE-2018-20893 · Websites & servers · Cpanel · reported by MITRELow 2.3
cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).CVE-2018-20892 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).CVE-2018-20891 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).CVE-2018-20890 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).CVE-2018-20889 · Websites & servers · Cpanel · reported by MITREMedium 4.4
cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).CVE-2018-20888 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).CVE-2018-20887 · Websites & servers · Cpanel · reported by MITRECritical 9.8
cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).CVE-2018-20886 · Websites & servers · Cpanel · reported by MITREMedium 5.3
cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).CVE-2018-20885 · Websites & servers · Cpanel · reported by MITREMedium 5.3
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).CVE-2018-20884 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).CVE-2018-20883 · Websites & servers · Cpanel · reported by MITREMedium 6.5
cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).CVE-2018-20882 · Websites & servers · Cpanel · reported by MITREMedium 6.8
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).CVE-2018-20881 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).CVE-2018-20880 · Websites & servers · Cpanel · reported by MITRELow 3.3
cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).CVE-2018-20879 · Websites & servers · Cpanel · reported by MITREMedium 6.3
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).CVE-2018-20878 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).CVE-2018-20877 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).CVE-2018-20876 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).CVE-2018-20875 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Aug 1, 2019cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).CVE-2018-20874 · Websites & servers · Cpanel · reported by MITREMedium 5.4
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Aug 1, 2019cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).CVE-2018-20873 · Websites & servers · Cpanel · reported by MITRELow 3.3
cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net news.cpanel.com
Jul 30, 2019In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).CVE-2019-14414 · Websites & servers · Cpanel · reported by MITRELow 3.3
In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476).CVE-2019-14413 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474).CVE-2019-14412 · Websites & servers · Cpanel · reported by MITRELow 3.3
Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473).CVE-2019-14411 · Websites & servers · Cpanel · reported by MITREMedium 5.3
cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472).CVE-2019-14410 · Websites & servers · Cpanel · reported by MITRELow 3.3
Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).CVE-2019-14409 · Websites & servers · Cpanel · reported by MITREMedium 5.5
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).CVE-2019-14408 · Websites & servers · Cpanel · reported by MITREMedium 4.3
cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net
Jul 30, 2019cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).CVE-2019-14407 · Websites & servers · Cpanel · reported by MITRELow 2.7
cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).
Product
Cpanel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record documentation.cpanel.net documentation.cpanel.net

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.