Vulnerabilities
Secure WooCommerce Sites Against Critical Unauthenticated Code Execution in Booster Plugin
A critical vulnerability in Booster for WooCommerce allows attackers to execute code without authentication, affecting versions up to 8.4.0.
CWE-502
Everything BlueTeam Herald has reported about CWE-502: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch ThemeREX Dwell Now to Fix Critical Deserialization Bug in Versions Through 1.16.0
A critical deserialization vulnerability in ThemeREX Dwell through version 1.16.0 allows object injection, carrying a CVSS score of 9.8.