Security Advisory: Two new high severity WordPress vulnerabilities

This advisory is provided as a courtesy. We want to bring to your attention two newly discovered vulnerabilities in WordPress, a very popular content management system (CMS) for websites. CVE-2026-60137 - A facilitated SQL injection issue reported as a team by TF1T, dtro, and haongo CVE-2026-63030 – A REST API batch-route confusion and SQL injection issue leading to Remote Code Execution r ...

Security Advisory: Two New Security Vulnerabilities in Plesk

This advisory is provided as a courtesy. We want to bring to your attention two newly discovered vulnerabilities in the Plesk hosting control panel. Blind SQL Injection - CVE-2026-64636 An attacker could extract data from the server database through a read-only SQL injection. Affected Versions: Plesk Versions 18.0.51 up to 18.0.79.4 Fixed Versions: Plesk 18.0.80.1 and Plesk ...

Security Advisory: Multiple Critical Vulnerabiliities affecting VMware ESX and vCenter

This advisory is provided as a courtesy. We would like to bring to your attention multiple critical vulnerabilities in Broadcom VMware ESX and vCenter products. Broadcom has released security updates addressing multiple critical vulnerabilties affecting VMware ESX, vCenter, Workstation and Fusion, among others. These vulnerabilities have been assigned CVE-2026-59309, CVE-2026-59310, ...