Tag

vulnerability

All posts in this stream, newest first.

Critical libheif Flaw Lets Attackers Hijack Servers via iPhone Photos

Wordfence Argus researchers uncovered a critical, CVSS 9.8 vulnerability in libheif, a widely used library for processing HEIC images from iPhones, and demonstrated real code execution on a WordPress deployment.

by Robbie·Sep 21, 2026·1 min read

Cloudflare Ships WAF Rules for Critical WordPress RCE and SQL Injection Bugs

Cloudflare deployed new firewall rules protecting all customers, including free plans, from an unauthenticated remote code execution flaw and a related SQL injection bug in WordPress. Site owners should still patch immediately.

by Robbie·Jul 18, 2026·2 min read