CVE-2026-13339

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewpgetsvgcontent' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensiti...

CVE-2026-4054

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...

March 18 2021—KB5001633 (OS Build 14393.4288) Out-of-band

None None...

Notorious dark web child abuser arrested after int’l operation

By Deeba Ahmed Authorities have arrested a dark web child abuser known for uploading highly graphic content on several marketplaces and online forums. This is a post from HackRead.com Read the original post: Notorious dark web child abuser arrested after int'l operation...