Section
Security
Hardening, vulnerabilities and pragmatic compliance for small sites.
Security
Drupal patches a critical remote code execution flaw in Webform
The Webform module ships around twenty security advisories in a single window, including a critical remote code execution flaw. Version…
Security
Two Critical Flaws Hit Widely Used WordPress Plugins
Two vulnerabilities rated 9.8 out of 10 affect Visual Composer Website Builder and the WAWP plugin for WooCommerce, letting unauthenticated…
Security
WordPress: A Critical Flaw Under Active Attack Five Days After Its Patch
Patched on September 22 in WordPress 7.1.2, CVE-2026-87902 is now under heavy scanning: more than 30,000 IP addresses probed sites…
Security
npm Opens Dist-Tag Management to Trusted Publishing, No Token Needed
npm can now move dist-tags such as “latest” or “next” using the short-lived OIDC credentials from trusted publishing, with no…