Sirv Plugin Arbitrary File Upload Vulnerability (CVE-2024-5853): Critical Severity
Uncovering a Critical File Upload Flaw in Sirv WordPress Plugin A serious security flaw, identified as CVE-2024-5853, has been discovered in the Sirv plugin…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
WP Crontrol Remote Code Execution Vulnerability (CVE-2024-28850): High Severity
The WP Crontrol plugin for WordPress, a popular tool for managing scheduled tasks on websites, has been identified with a potential security weakness. This…
TaxoPress Plugin for WordPress Authorization Bypass Vulnerability (CVE-2025-13354): Medium Severity
Overview A security flaw has been found in the TaxoPress plugin for WordPress, a popular tool for managing tags, categories, and other taxonomy terms.…
Webform Multiple File Upload XSS Vulnerability (CVE-2025-12848): Medium Severity
Overview The Webform Multiple File Upload module for Drupal 7.x has a security flaw known as a cross-site scripting (XSS) vulnerability. This issue allows…
WSDesk Privilege Escalation Vulnerability (CVE-2025-13534): Medium Severity
Understanding the WSDesk Privilege Escalation Vulnerability A significant security flaw has been identified in the ELEX WordPress HelpDesk & Customer Ticketing System, commonly known…
IDonate WordPress Plugin Insecure Direct Object Reference Vulnerability (CVE-2025-4522): Medium Severity
Understanding the IDonate Plugin Security Flaw The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress has a security flaw that…
IDonate Blood Donation Privilege Escalation Vulnerability (CVE-2025-4519): High Severity
Understanding the High-Severity IDonate Vulnerability A significant security flaw has been discovered in the IDonate – Blood Donation, Request And Donor Management System plugin…
IDonate WordPress Plugin Unauthenticated User Deletion Vulnerability (CVE-2025-11154): Medium Severity
In the dynamic world of web security, staying ahead of potential threats is paramount, especially for WordPress site administrators. A recent discovery has brought…
Tutor LMS Sensitive Information Exposure Vulnerability (CVE-2025-6680): Medium Severity
Understanding the Sensitive Information Exposure in Tutor LMS A notable security vulnerability has been identified in the Tutor LMS – eLearning and online course…
Tutor LMS Unauthorized Data Modification Vulnerability (CVE-2025-11564): Medium Severity Explained
Understanding the Tutor LMS Vulnerability The Tutor LMS plugin, a popular solution for creating and managing online courses within WordPress, has been identified with…
Drupal Owl Carousel 2 Vulnerability (CVE-2025-9554): Medium Severity Explained
Understanding the Drupal Owl Carousel 2 Vulnerability A security vulnerability has been identified in the Drupal Owl Carousel 2 module. This issue could potentially…
Drupal API Key Manager Vulnerability (CVE-2025-9553): Medium Severity Explained
A notable security concern has emerged within the Drupal ecosystem, specifically affecting the API Key manager module. This vulnerability, identified as CVE-2025-9553, points to…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.