Search: “Script Security plugin”

152 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 198 Malware 182 Exploit / PoC 71 Ransomware 61 Threat actor 60 Data breach 33 Phishing & fraud 16 AI safety & security 7 Policy & legal 7 Industry 6 AI tools & infra 4 Tools 4 Advisory 4 Research 2

SeverityAll critical 232 high 236 medium 152 low 26 info 10

Jenkins security advisory (AV26-877)

Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.

The Canadian Centre for Cyber Security published advisory AV26-877 for the Jenkins security advisory dated September 2, 2026. Affected products include Jenkins releases other than 2.568.3 and 2.580, plus plugins such as GitLab, LDAP, Microsoft Entra ID, SAML, Script Security, Pipeline Build Step, and others. Administrators are encouraged to review the linked advisory and apply necessary updates.

Canadian Centre for Cyber SecuritySep 3, 13:54 UTC · 12d agoAdvisory

WordPress Plugin Facebook Widget affected by Authenticated XSS

Security AffairsJul 29, 20:43 UTC · Jul 29, 2019Vulnerability

WildPressure targets macOS

Kaspersky SecurelistJul 7, 10:00 UTC · Jul 7, 2021Malware

5 million WordPress sites potentially impacted by a Contact Form 7 flaw

Security AffairsDec 17, 20:44 UTC · Dec 17, 2020Vulnerability

Europol and ENISA spotted 443 e

Security AffairsDec 25, 14:54 UTC · Dec 25, 2023Vulnerability

Stripe API Skimming Campaign Unveils New Techniques for Theft

Infosecurity MagazineApr 2, 17:30 UTC · Apr 2, 2025Threat actor

Kaspersky addressed multiple issues in online protection solutions

Security AffairsNov 26, 21:55 UTC · Nov 26, 2019Vulnerability

Attackers are exploiting WordPress plugin flaw to inject malicious scripts

Help Net SecurityMay 30, 00:00 UTC · May 30, 2019Vulnerability

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal

The Hacker NewsApr 9, 08:21 UTC · Apr 9, 2025Vulnerability

Microsoft Warns of Web Skimmers Mimicking Google Analytics and Meta Pixel Code

The Hacker NewsMay 25, 03:04 UTC · May 25, 2022Data breach1

New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites

The Hacker NewsJun 26, 13:40 UTC · Jun 26, 2024Malware

Malicious Browser Extensions Infect Over 700 Users Across Latin America Since Early 2025

The Hacker NewsJun 9, 12:16 UTC · Jun 9, 2025Malware

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

The Hacker NewsFeb 29, 03:28 UTC · Feb 29, 2024Vulnerability CVE-2023-40000 CVE-2023-4372

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

The Hacker NewsNov 7, 04:20 UTC · Nov 7, 2024Malware

150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms

The Hacker NewsMar 27, 08:13 UTC · Mar 27, 2025Malware

WordPress plugins and themes vulnerabilities statistics for 2017 year

Security AffairsJan 23, 19:12 UTC · Jan 23, 2018Vulnerability

Attackers Using Obfuscation Tools to Deliver Multi

The Hacker NewsApr 10, 14:05 UTC · Apr 10, 2024Malware

The source code of Banshee Stealer leaked online

Security AffairsNov 26, 10:21 UTC · Nov 26, 2024Malware

Banshee Stealer, a new macOS malware with a monthly subscription price of $3,000

Security AffairsAug 16, 14:56 UTC · Aug 16, 2024Malware

WordPress 4.7.2 release addresses XSS, SQL Injection vulnerabilities

Security AffairsJan 28, 11:47 UTC · Jan 28, 2017Vulnerability

Third-Party ChatGPT Plugins Could Lead to Account Takeovers

The Hacker NewsMar 18, 05:47 UTC · Mar 18, 2024Data breach

WordPress Plugins could expose online shoppers on Black Friday

Security AffairsNov 23, 07:06 UTC · Nov 23, 2016Vulnerability

MATA: Multi

Kaspersky SecurelistJul 22, 10:00 UTC · Jul 22, 2020Vulnerability CVE-2019-3396

Flaws in Multidots WordPress Plugins expose e-Commerce websites to a broad range of attacks

Security AffairsJun 2, 14:20 UTC · Jun 2, 2018Exploit / PoC CVE-2018-11579 CVE-2018-11580 CVE-2018-11633+1 CVEs

MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks

The Hacker NewsMay 2, 08:57 UTC · May 2, 2025Malware

Australian Cyber Security Centre Issues Alert Over ClickFix Attacks

Infosecurity MagazineMay 8, 11:00 UTC · May 8, 2026Vulnerability

Top LLM vulnerabilities and how to mitigate the associated risk

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2024AI safety & security

x64dbg: Open-source binary debugger for Windows

Help Net SecurityAug 19, 00:00 UTC · Aug 19, 2024Malware

Microsoft warns of new highly evasive web skimming campaigns

Security AffairsMay 24, 17:28 UTC · May 24, 2022Threat actor

Jellyfin 12.0 Released With Security Fixes for Unauthorized File Access and XSS Flaws

Jellyfin 12.0 fixes unauthorized file access and web client XSS flaws, but requires careful upgrades due to breaking database migrations and plugin changes.

The open-source media server release prevents crafted requests from reading files outside designated directories, blocks unauthorized re-runs of the setup wizard, rejects plugin packages with unsafe names, strengthens parental control enforcement, and fixes cross-site scripting vulnerabilities in browser-based administration and media access workflows. Upgrades require a manual backup because the database schema migration is irreversible; supported paths start from version 10.10.7 or 10.11.x, and duplicate case-insensitive usernames will break migration. The release also retires legacy /emby/ and /mediabrowser/ routes, disables deprecated authentication by default, and targets .NET 10, requiring plugin rebuilds.

GBHackersSep 8, 12:23 UTC · 7d agoVulnerability1