Security Advisory: Critical CVEs in WordPress Plugins, Themes, and Infrastructure — June 2026
Tyche Security Scan – Week of June 12, 2026 The latest Tyche security scan identified several critical and high-severity CVEs…
CVE-2026-11645
Security Advisory: Mirasvit Cache Warmer RCE and cPanel WP2 Auth Bypass Added to CISA KEV
Critical WordPress Security Advisory – June 2026 Two WordPress-relevant vulnerabilities have been added to the CISA Known Exploited Vulnerabilities (KEV)…
Fortinet and Ivanti Ship Emergency Patches for Critical Command Injection Bugs
Both Fortinet and Ivanti have released urgent updates addressing critical OS command injection vulnerabilities that can be exploited remotely, without…
Google Patches Fifth Chrome Zero-Day This Year — And Attackers Are Already Using It
Google patched CVE-2026-11645, a fifth Chrome zero-day this year, involving a V8 out-of-bounds read/write that can bypass ASLR. The exploit is already in the wild — here’s what to do.