EasyDiscuss Persistent XSS Vulnerability (CVE-2026-21623): Medium Severity
Security is a continuous journey, and staying informed about potential weaknesses in your software is crucial. Today, we’re looking at a vulnerability identified in…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
URL Shortify WordPress Plugin CSRF Vulnerability (CVE-2021-24749): Medium Severity
Understanding the Vulnerability The URL Shortify plugin for WordPress, a tool designed to help you manage and shorten URLs on your website, had a…
Plesk Obsidian Denial of Service Vulnerability (CVE-2025-65518): High Severity
A significant security flaw has been identified in Plesk Obsidian, a popular web hosting control panel. This vulnerability, tracked as CVE-2025-65518, could allow attackers…
WP Shopify Reflected Cross-Site Scripting Vulnerability (CVE-2025-7808): Medium Severity
A security vulnerability has been identified in the WP Shopify plugin for WordPress, specifically affecting versions prior to 1.5.4. This flaw, tracked as CVE-2025-7808,…
Compress & Upload WordPress Plugin Improper File Upload Validation Vulnerability (CVE-2025-8889): Low Severity
The digital landscape relies heavily on the smooth functioning of plugins, especially within platforms like WordPress. However, sometimes these helpful tools can introduce security…
WebberZone Better Search Stored Cross-site Scripting Vulnerability (CVE-2024-29142): High Severity
Understanding the Risk: Stored XSS in Better Search Plugin A significant security flaw has been identified in the WebberZone Better Search plugin for WordPress.…
AnythingLLM Path Traversal Vulnerability (CVE-2026-24478): High Severity
Understanding the AnythingLLM Path Traversal Vulnerability A significant security flaw has been found in AnythingLLM, a helpful application that transforms your content into a…
ThemeGoods Grand Tour Object Injection Vulnerability (CVE-2025-39485): Critical Severity
A serious security flaw has been found in the ThemeGoods Grand Tour | Travel Agency WordPress theme. This vulnerability, identified as a Deserialization of…
Ebook Store WordPress Plugin Reflected Cross-Site Scripting Vulnerability (CVE-2025-8113): Medium Severity
Understanding the Ebook Store WordPress Plugin Vulnerability A security flaw has been found in the Ebook Store WordPress plugin that could allow attackers to…
Stop User Enumeration Protection Bypass Vulnerability (CVE-2025-4302): Medium Severity
Overview The Stop User Enumeration plugin for WordPress, a tool designed to shield your website’s user data from prying eyes, has been found to…
eaSYNC Booking plugin Insecure Direct Object Reference Vulnerability (CVE-2025-4691): Medium Severity
The eaSYNC Booking plugin, a widely used tool for managing reservations in hotels, restaurants, and car rental services on WordPress platforms, has been found…
Free Booking Plugin for WordPress CSRF Vulnerability (CVE-2024-9450): Medium Severity
Understanding the Free Booking Plugin Vulnerability A security flaw has been found in the Free Booking Plugin for Hotels, Restaurants and Car Rentals, also…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.