CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

PHP error_log File Detected

An information disclosure vulnerability exists in the remote web server due to the disclosure of the errorlog file. An unauthenticated, remote attacker can exploit this, via a simple GET request, to disclose potentially sensitive information. No source data...