#CMS Security
All CosmicBytez Labs articles tagged #CMS Security, across news, security advisories, how-to guides, and projects.
- News
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaws
Drupal patched critical RCE flaws CVE-2026-108097 and CVE-2026-108099, warning exploits could emerge within hours or days.
- Security
WordPress Jawn Theme Unauthenticated Privilege Escalation
CVE-2026-78477 allows unauthenticated attackers to escalate to WordPress administrator in Jawn theme versions up to 1.4.2, CVSS 9.8 critical.
- News
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites
Drupal has released emergency security updates for CVE-2026-9082, a highly critical vulnerability in Drupal Core that allows remote code execution,...
- Security
Critical Authentication Bypass in WordPress Temporary Login
A critical CVSS 9.8 authentication bypass in the WordPress Temporary Login plugin (versions up to 1.0.0) allows unauthenticated attackers to gain...
- Security
CVE-2026-39397: PayloadCMS Puck Plugin Access Control Bypass
A critical access control bypass (CVSS 9.4) in the @delmaredigital/payload-puck PayloadCMS plugin exposes all /api/puck/* CRUD endpoints without...