The Limit Login Attempts plugin for WordPress had a critical vulnerability affecting over 600,000 sites. This unauthenticated stored Cross-Site Scripting vulnerability allowed attackers to inject harmful JavaScript into the site's database. A site administrator accessing [...]

CozmoLabs has recently patched a vulnerability in its Profile Builder plugin that could have led to an account takeover. The vulnerability was caused by information disclosure, which allowed attackers to access sensitive information about the [...]

Cybersecurity often does not discuss intentional vulnerabilities and becoming your threat actor. While we often focus on threat actors and vulnerable codes, we must recognize that we can work against our best interests even with [...]