Threat feed

We follow new vulnerabilities in PHP, WordPress and popular software and break them down briefly: what happened, who is affected, how to check and fix. For some threats Shield can check your site from outside; for the rest we say plainly that you can only check on your own server.

All 91 Articles 49 News 42 Threats 28
All notes ✅ Checked by Shield · Checked only Check your site in Shield
What the badges mean
✅ Checked by Shield Shield already looks for this in site checks: it will find it and show it in the report.
⏳ Not checked yet Not visible from outside yet, or not added to the checks: check it yourself using the note.
Check your site in Shield →
October 23, 2026 🔴 Critical ✅ Checked by Shield
Active Products Tables for WooCommerce: unauthenticated SQL injection (CVE-2026-66436)
October 23, 2026 🔴 Critical ✅ Checked by Shield
Forminator Forms: arbitrary file upload (CVE-2026-15748)
October 23, 2026 🔴 Critical ✅ Checked by Shield
Thrive Apprentice: unauthenticated PHP object injection (CVE-2026-49107)
October 21, 2026 🔴 Critical ✅ Checked by Shield
PHP2Shell: a critical flaw in PHP itself (CVE-2026-109618, CVE-2026-109619)
Free · no sign-up

How many clicks is your site missing?

The SEO Radar shows in a minute which pages sit near the top of Google and what keeps them from moving up.

An estimate from positions, not a promise
First publication freeA link on a trusted site after sign-up. Cascades from $30.Claim ShieldCheck your site for hacks and malicious code.Check Keyword StudioQueries, volumes and clusters for your article.Open AppProjects and reports in your pocket, iOS and Android.Download
SEO tools
SEO Audit Backlinks Trust Speed AI Detector Humanizer All 120+
New articles by email