News Security CISA flags active RCE exploitation in Joomla extensions; separate SQLi fix lands for Quix Page Builder July 20, 2026 / July 20, 2026 by Alex Mira | Leave a Comment CISA added two actively exploited Joomla extension flaws to its KEV catalog, warning of RCE via file uploads in iCagenda and Balbooa Forms. Separately, Quix Page Builder patched an unauthenticated SQL injection in version 6.2.1. Read more » CISA CMS security cve Joomla Joomla extensions Patch management Remote code execution
News Security Zoom patches critical Windows account takeover flaw (CVE-2026-53412) and related privilege escalation issue July 20, 2026 / July 20, 2026 by Alex Mira | Leave a Comment Zoom fixed a critical Windows account takeover flaw (CVE-2026-53412) and a related privilege escalation issue (CVE-2026-53411). Update Windows clients, VDI deployments, and the Meeting SDK without delay. Read more » CVE-2026-53411 CVE-2026-53412 Enterprise security Patch management VDI Windows security Zoom
News Critical auth bypass in Burst Statistics plugin puts 200,000 WordPress sites at risk June 2, 2026 / June 2, 2026 by Alex Mira | Leave a Comment A critical auth bypass in the Burst Statistics WordPress plugin (CVE-2026-8181) could let attackers impersonate admins via the REST API. A patch is available; update now. A separate low-severity bypass in Advanced Access Manager (CVE-2026-42674) is fixed in 7.1.1. Read more » Advanced Access Manager Authentication bypass Burst Statistics CVE-2026-8181 Patch management Vulnerabilities WordPress security
