Aggregator

The Pennsylvania State Education Association (PSEA), the largest public-sector union in Pennsylvania, is notifying over half a million individuals that attackers stole their personal information in a July 2024 security breach. [...]

CISA this week added CVE-2025-24472 to its catalog of known exploited vulnerabilities, citing ransomware activity targeting the authentication bypass flaw.

A vulnerability classified as critical has been found in User Registration Plugin up to 2.3.2.1 on WordPress. Affected is the function send_test_email. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2023-29429. It is possible to launch the attack remotely. There is no exploit available.