Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

5 headlines in this view

Showing 5 most recent headlines Filtered view

Info Security Magazine 3 months, 1 week ago

Critical Vulnerability in Ninja Forms Exposes WordPress Sites

Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately

Info Security Magazine 9 Apr 2026, 3:10 a.m. Critical Vulnerability Remote Code Execution Unauthenticated Vulnerability Wordpress

Info Security Magazine 10 months, 2 weeks ago

A vulnerability in the WordPress Paid Memberships Subscription plugin could lead to unauthenticated SQL injection on affected sites

Info Security Magazine 2 Sep 2025, 3:00 a.m. SQL Unauthenticated Vulnerability Wordpress

Info Security Magazine 1 year, 3 months ago

Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites

Info Security Magazine 15 Apr 2025, 3:00 a.m. Flaw Unauthenticated Wordpress

Info Security Magazine 2 years, 9 months ago

Patchstack uncovered an unauthenticated role privilege escalation flaw and an account takeover vulnerability

Info Security Magazine 28 Sep 2023, 5:30 a.m. Flaw Privilege Escalation Unauthenticated Vulnerability Wordpress

Info Security Magazine 3 years, 1 month ago

The vulnerability affects versions 7.4.0 and below of the WordPress plugin

Info Security Magazine 15 Jun 2023, 3:30 a.m. Exposure PII Unauthenticated Vulnerability Wordpress