PT-2026-66366

Name of the Vulnerable Software and Affected Versions Frontend Admin versions prior to 3.29.7 Description Authenticated users with low privileges, such as Subscribers, can create, rename, and delete arbitrary taxonomy terms. This occurs because the plugin fails to perform necessary capability...

CVE-2026-33177

CVE-2026-33177 affects Statamic CMS (Laravel/Git-powered). Prior to versions 5.73.14 and 6.7.0, low-privileged Control Panel users could bypass authorization by submitting requests to the field action processing endpoint with attacker-controlled field definitions, enabling creation of taxonomy te...