CVE-2026-29014: MetInfo CMS Vulnerability
A vulnerability in MetInfo CMS exploited in a global CMS campaign for web shell deployment.
Tag: CMS
Australian Cyber Security Centre (ACSC)
Australian agency that issued an alert about a global exploitation campaign targeting vulnerable CMS systems and plugins, including web shell deployment.
Joomla CMS
A popular content management system (CMS) whose extensions iCagenda and Balbooa Forms were exploited as zero-days.
CVE-2026-0740: Ninja Forms WordPress Plugin Vulnerability
A vulnerability in the Ninja Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-12057: WavePlayer WordPress Plugin Vulnerability
A vulnerability in the WavePlayer WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-7852: WPBookit WordPress Plugin Vulnerability
A vulnerability in the WPBookit WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2026-3844: Breeze Cache WordPress Plugin Vulnerability
A vulnerability in the Breeze Cache WordPress plugin exploited in a global CMS campaign for web shell deployment.
Joomla: Content Management System Provider
Joomla is the provider of the Joomla content management system (CMS). It warned users about active exploitation of a critical flaw in…
WordPress: CMS Platform Affected by Plugin Supply Chain Attack
WordPress is the content management system affected by the BdThemes supply chain attack, which exploited a vulnerability in a promotional banner component…
WordPress: Core CMS with High-Severity RCE Vulnerability
The popular CMS. Versions 4.7 through 7.0 are affected by CVE-2026-65640, allowing Author-level users to achieve RCE via malicious Postscript uploads. Patched…