What’s being exploited nowhttps://prestasoftware.com/en/vitrine/news/Recent public advisories that name website software our review recognizes. Each line links to the source. It describes the software, never any particular site, and it is not a report about yours.Canadian Centre for Cyber Security published an advisory on 2026-11-12 that names React.https://cyber.gc.ca/en/alerts-advisories/react-security-advisory-av26-1152https://cyber.gc.ca/en/alerts-advisories/react-security-advisory-av26-1152Thu, 12 Nov 2026 00:00:00 GMTMollie for Drupal - Moderately critical - Information disclosure - SA-CONTRIB-2026-329https://www.drupal.org/sa-contrib-2026-329https://www.drupal.org/sa-contrib-2026-329Wed, 11 Nov 2026 00:00:00 GMTMollie for Drupal - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-328https://www.drupal.org/sa-contrib-2026-328https://www.drupal.org/sa-contrib-2026-328Wed, 11 Nov 2026 00:00:00 GMTREST & JSON API Authentication for Drupal - Critical - Access bypass - SA-CONTRIB-2026-298https://www.drupal.org/sa-contrib-2026-298https://www.drupal.org/sa-contrib-2026-298Wed, 04 Nov 2026 00:00:00 GMTGroupEx PRO ( Daxko ) integration - Critical - PHP object injection - SA-CONTRIB-2026-278https://www.drupal.org/sa-contrib-2026-278https://www.drupal.org/sa-contrib-2026-278Wed, 04 Nov 2026 00:00:00 GMTCanadian Centre for Cyber Security published an advisory on 2026-11-03 that names WordPress.https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-1117https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-1117Tue, 03 Nov 2026 00:00:00 GMTWordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerabilityhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogCVE-2026-119977Tue, 03 Nov 2026 00:00:00 GMTWordPress.org security releases published an advisory on 2026-10-28 that names WordPress.https://wordpress.org/news/2026/10/wordpress-7-1-4/https://wordpress.org/news/2026/10/wordpress-7-1-4/Wed, 28 Oct 2026 00:00:00 GMTPHP Memory Corruption Vulnerabilityhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogCVE-2026-109618Mon, 26 Oct 2026 00:00:00 GMTPHP Stale Internal Request-State Vulnerabilityhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogCVE-2026-109619Mon, 26 Oct 2026 00:00:00 GMTWordPress.org security releases published an advisory on 2026-10-21 that names PHP.https://wordpress.org/news/2026/10/critical-php-security-release/https://wordpress.org/news/2026/10/critical-php-security-release/Wed, 21 Oct 2026 00:00:00 GMT