Notepad++ 8.9.9 fixes six flaws including plugin command execution
The local escalation needs NppExec, an elevated editor, and a second instance; MIME Tools 3.2 fixes separate overflows.
Stories per day · 30 days
2 RSS
Relatedwordfence5wordpress5sql-injection2themes2ai-gateway1bug-bounty1compilers1cross-site-scripting1datasette1file-upload1free-pascal1httpx1lazarus1litellm1mcp1mime-tools1notepad-plus-plus1open-source1
23 stories, newest first · one card per story
Stories tagged #plugins
Wordfence logs 549 WordPress flaws, including core installer RCE
Seventeen were rated critical; 41 of 549 remain unpatched, and free firewall users get new rules after 30 days.
Wordfence July 2026 bounty program received 1,077 reports
Validated WordPress plugin and theme flaws are disclosed to vendors and can get firewall coverage.
Wordfence logs 268 WordPress flaws, 43 still unpatched
Of the week’s disclosures, 7 were critical and 69 high, spanning 182 plugins and 15 themes.
Wordfence logs 497 WordPress flaws from October 12–18
Sixty-nine of the week's disclosures were still unpatched, including 23 rated critical, across plugins and themes.
Respan launches open-source Rust AI gateway built from plugins
The pre-alpha gateway, under MIT or Apache-2.0, lets teams add providers and features without changing a small core.
1
llm-tools-datasette 0.1.1 fixes breakage from LLM 0.33
The plugin used https without depending on it, so LLM 0.33's switch to httpx2 broke it.
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 5, 2026 to October 11, 2026)
Wordfence logged 655 WordPress plugin and theme flaws last week, including core XSS and unauthenticated SQL injection.
Claude Code's new Mods system lets developers rewrite the AI coding tool from the inside
Anthropic launched Mods, unsandboxed plugins that let developers change Claude Code's tools, commands, and interface.
DeepSeek Harness
DeepSeek released DeepSeek Harness, an open-source agent framework now in worldwide public preview.
8
OpenAI's reveals a new ChatGPT that looks less like a chatbot and more like an operating system
OpenAI's DevDay turns ChatGPT into a workspace with plugins, shared Spaces, and Slack and Teams integration.
OpenAI expands ChatGPT’s plugins with app-like interfaces and automations
OpenAI is letting developers build app-like ChatGPT plugin panels, file viewers, and event-driven automations.
Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors
Anthropic opened a Claude Marketplace with over 2,000 plugins, connectors, and partner agents.
PluginRSI: Recursive Improvement of Agent Harnesses with Reusable Plugins
PluginRSI evolves agent harnesses as reusable plugins that transfer across models and tasks.
Unity launches official plugins for Claude Code and OpenAI Codex to stop AI agents from using outdated tutorials
Unity released official plugins for Claude Code and OpenAI Codex, supplying maintained skills so AI agents stop using outdated engine tutorials.
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)
Wordfence's weekly report aggregates newly disclosed WordPress plugin and theme vulnerabilities for September 7–13, 2026.
Multiple vulnerabilities in Jenkins plugins
Jenkins releases security fixes for multiple plugins including Bitbucket, GitLab, Gitee, Coverage, and Gradle integrations.
Jenkins Security Advisory 2026-09-16
Jenkins released a security advisory patching vulnerabilities across 13 plugins, including GitLab, Bitbucket, Gradle, Keycloak Authentication, and Script Security.
WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review
WordPress.org now runs AI-powered automated security reviews on every plugin release, automatically blocking high-risk updates before distribution to millions of sites.
3
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)
Wordfence's weekly WordPress vulnerability report summarizes plugin and theme vulnerabilities disclosed and added to its database during the week ending September 6, 2026.
Jenkins security advisory (AV26-877)
Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.
Jenkins Security Advisory 2026-09-02
Jenkins releases a security advisory affecting Jenkins Core, update-center2, and 17 plugins including GitLab, SAML, LDAP, Microsoft Entra ID, and Script Security.
Vulnerability & Patch Roundup — August 2026
Sucuri's monthly roundup compiles August 2026 security patches for the WordPress ecosystem to help site owners prioritize updates against automated exploitation.