Threat feed

We follow new vulnerabilities in PHP, WordPress and popular software and break them down briefly: what happened, who is affected, how to check and fix. For some threats Shield can check your site from outside; for the rest we say plainly that you can only check on your own server.

All 91 Articles 49 News 42 Threats 28
All notes ✅ Checked by Shield · Checked only Check your site in Shield
What the badges mean
✅ Checked by Shield Shield already looks for this in site checks: it will find it and show it in the report.
⏳ Not checked yet Not visible from outside yet, or not added to the checks: check it yourself using the note.
Check your site in Shield →
October 28, 2026 🔴 Critical ⏳ Not checked yet
FunnelKit Automations: Blind SQL Injection (CVE-2026-111411)
October 27, 2026 🔴 Critical ⏳ Not checked yet
Gridbox for Joomla: unauthenticated SQL injection (CVE-2026-102788)
October 27, 2026 🔴 Critical ⏳ Not checked yet
Adobe Commerce and Magento: dangerous file upload (CVE-2026-48356)
October 26, 2026 🔴 Critical ⏳ Not checked yet
rtMedia: Blind SQL Injection (CVE-2026-66592)
October 26, 2026 🔴 Critical ⏳ Not checked yet
Adobe Commerce: incorrect authorization (CVE-2026-71362)
October 25, 2026 🔴 Critical ✅ Checked by Shield
Booster for WooCommerce: customer arbitrary file upload (CVE-2026-56027)
October 25, 2026 🔴 Critical ✅ Checked by Shield
BuddyBoss Platform: Subscriber PHP Object Injection (CVE-2026-56032)
October 25, 2026 🔴 Critical ✅ Checked by Shield
Page Builder CK for Joomla: unauthenticated file upload (CVE-2026-56290)
October 24, 2026 🔴 Critical ✅ Checked by Shield
WooCommerce Product Filters: unauthenticated PHP Object Injection (CVE-2026-40725)
October 24, 2026 🔴 Critical ✅ Checked by Shield
DJ-Classifieds for Joomla: unauthenticated file upload (CVE-2026-61424)
October 24, 2026 🔴 Critical ✅ Checked by Shield
Aimogen Pro: unauthenticated privilege escalation (CVE-2026-15982)
October 23, 2026 🟡 Watching ⏳ Not checked yet
PHP: another vulnerability with no patch (CVE-2026-115560) and how a setting closes it
Free · no sign-up

How many clicks is your site missing?

The SEO Radar shows in a minute which pages sit near the top of Google and what keeps them from moving up.

An estimate from positions, not a promise
First publication freeA link on a trusted site after sign-up. Cascades from $30.Claim ShieldCheck your site for hacks and malicious code.Check Keyword StudioQueries, volumes and clusters for your article.Open AppProjects and reports in your pocket, iOS and Android.Download
SEO tools
SEO Audit Backlinks Trust Speed AI Detector Humanizer All 120+
New articles by email