Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
51 results · page 1 of 2
Oct 4, 2026A weakness has been identified in YzmCMS up to 7.6.CVE-2026-105156 · Other software · reported by VulDBLow 2.9
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. The vendor kindly explains: "Our regular release cycle is about 6 months. The last release was in the previous month, and our next scheduled version will be released in March 2027. We will implement the backward-compatible gradual hash migration feature in this upcoming release. (...) Before the new version is available, we will publish security mitigation guidance on our official documentation for existing deployers to reduce the risk."
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 27, 2026A SQL injection vulnerability was found in YzmCMS 7.5.CVE-2026-75417 · Other software · reported by MITREHigh 7.2
A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FIND_IN_SET() SQL clause without proper sanitization. This allows an authenticated administrator to execute arbitrary SQL queries via boolean-based blind injection, potentially leading to full database compromise.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2026A security vulnerability has been detected in YzmCMS up to 7.5.CVE-2026-15202 · Other software · reported by VulDBLow 2.1
A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url of the file /yzmphp/yzmphp.php of the component Header Handler. The manipulation of the argument HTTP_HOST leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Jun 29, 2026A vulnerability was determined in YzmCMS up to 7.5.CVE-2026-13529 · Other software · reported by VulDBLow 2.9
A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of the argument siteurl can lead to sql injection. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is reported as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 26, 2026A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the cCVE-2026-29933 · Other software · Yzmcms · reported by MITREMedium 6.1
A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2025Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.CVE-2025-56304 · Other software · Yzmcms · reported by MITREMedium 6.1
Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 7, 2025A vulnerability classified as problematic has been found in YzmCMS 7.1.CVE-2025-3397 · Other software · Yzmcms · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2024A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafteCVE-2024-39174 · Other software · yzmcms · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article.
- Product
- yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 17, 2024A reflected XSS vulnerability has been found in YzmCMS 7.1.CVE-2024-35110 · Other software · yzmcms · reported by MITREMedium 5.5
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker.
- Product
- yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2024Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings.CVE-2024-28725 · Other software · yzmcms · reported by MITREHigh 7.1
Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings.
- Product
- yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 6, 2024An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL.CVE-2024-24291 · Other software · Yzmcms · reported by MITREMedium 6.1
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 10, 2024member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.CVE-2023-52274 · Other software · Yzmcms · reported by MITREMedium 6.1
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 11, 2023Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/aCVE-2020-23595 · Other software · Yzmcms · reported by MITREHigh 8.8
Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 20, 2023Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.CVE-2020-20502 · Other software · Yzmcms · reported by MITREMedium 6.5
Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 3, 2023Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.CVE-2021-36712 · Other software · Yzmcms · reported by MITREMedium 5.4
Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2022YzmCMS v6.3 is affected by broken access control.CVE-2022-23383 · Other software · Yzmcms · reported by MITRECritical 9.1
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddown.chinaz.comcnvd.org.cn
Feb 15, 2022YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.addCVE-2022-23384 · Other software · Yzmcms · reported by MITREHigh 8.8
YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 28, 2022The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of commentsCVE-2022-23889 · Other software · Yzmcms · reported by MITREMedium 5.3
The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 28, 2022YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.CVE-2022-23888 · Other software · Yzmcms · reported by MITREHigh 8.8
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 28, 2022YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delCVE-2022-23887 · Other software · Yzmcms · reported by MITREMedium 6.5
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2021A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application.CVE-2020-19951 · Other software · Yzmcms · reported by MITREHigh 8.8
A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2021A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML.CVE-2020-19950 · Other software · Yzmcms · reported by MITREMedium 4.8
A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2021A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML.CVE-2020-19949 · Other software · Yzmcms · reported by MITREMedium 4.8
A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2021YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.CVE-2020-20341 · Other software · Yzmcms · reported by MITREHigh 7.5
YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 30, 2021Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html.CVE-2020-19118 · Other software · Yzmcms · reported by MITREMedium 5.4
Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 3, 2021An issue was discovered in YzmCMS V5.8.CVE-2020-35972 · Other software · Yzmcms · reported by MITREMedium 4.3
An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 3, 2021A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_CVE-2020-35971 · Other software · Yzmcms · reported by MITREMedium 5.4
A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 3, 2021An issue was discovered in YzmCMS 5.8.CVE-2020-35970 · Other software · Yzmcms · reported by MITREHigh 7.5
An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2021In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swfCVE-2020-23370 · Other software · Yzmcms · reported by MITREMedium 5.4
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2021In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.CVE-2020-23369 · Other software · Yzmcms · reported by MITREMedium 6.1
In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2021Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to CVE-2020-18084 · Other software · Yzmcms · reported by MITREMedium 6.1
Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 19, 2020In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.CVE-2020-22394 · Other software · Yzmcms · reported by MITREMedium 6.1
In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2019An HTTP Host header injection vulnerability exists in YzmCMS V5.3.CVE-2019-16532 · Other software · Yzmcms · reported by MITREMedium 6.1
An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comexploit-db.com
Sep 21, 2019admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.CVE-2019-16678 · Other software · Yzmcms · reported by MITREMedium 6.5
admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 20, 2019YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter.CVE-2018-16247 · Other software · Yzmcms · reported by MITREMedium 5.4
YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2019Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,CVE-2019-9661 · Other software · Yzmcms · reported by MITREMedium 4.8
Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2019Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.CVE-2019-9660 · Other software · Yzmcms · reported by MITREMedium 4.8
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2019An issue was discovered in YzmCMS 5.2.0.CVE-2019-9570 · Other software · Yzmcms · reported by MITREMedium 4.8
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2018YzmCMS v5.2 has admin/role/add.html CSRF.CVE-2018-20015 · Other software · Yzmcms · reported by MITREHigh 8.8
YzmCMS v5.2 has admin/role/add.html CSRF.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 4, 2018An issue was discovered in YzmCMS 5.2.CVE-2018-19849 · Other software · Yzmcms · reported by MITREMedium 4.8
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 7, 2018An issue was discovered in YzmCMS v5.2.CVE-2018-19092 · Other software · Yzmcms · reported by MITREMedium 6.1
An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2018In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.CVE-2018-17044 · Other software · Yzmcms · reported by MITREMedium 4.8
In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 5, 2018The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and CVE-2018-11554 · Other software · Yzmcms · reported by MITRECritical 9.8
The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 19, 2018An issue was discovered in YzmCMS 3.8.CVE-2018-10224 · Other software · Yzmcms · reported by MITREMedium 6.8
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 19, 2018An issue was discovered in YzmCMS 3.8.CVE-2018-10223 · Other software · Yzmcms · reported by MITREMedium 6.8
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2018The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controCVE-2018-10026 · Other software · Yzmcms · reported by MITREMedium 4.8
The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 18, 2018Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST datCVE-2018-8756 · Other software · Yzmcms · reported by MITREHigh 7.2
Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST data of an index.php?m=member&c=member_content&a=init request.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 13, 2018YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.CVE-2018-8078 · Other software · Yzmcms · reported by MITREMedium 5.4
YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 4, 2018In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.CVE-2018-7653 · Other software · Yzmcms · reported by MITREMedium 6.1
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.compacketstormsecurity.com
Mar 1, 2018\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.htmlCVE-2018-7579 · Other software · Yzmcms · reported by MITREHigh 7.2
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html.
- Product
- Yzmcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.