CISA adds CVE-2024-49138 to its KEV Catalog

CISA adds CVE-2024-49138 to its KEV Catalog

The US CISA adds Microsoft vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. The vulnerability tracked as CVE-2024-49138 with a CVSS score of 7.8…
WordPress WPForms flaw CVE-2024-11205

WordPress WPForms flaw CVE-2024-11205

A critical vulnerability has been discovered in Wordpress plugin WPForms. The flaw allows authenticated attackers with subscriber-level privileges or higher to execute unauthorized refunds of Stripe payments and cancellations of…