Piotnet Forms up to 1.0.30 hit by HIGH severity XSS (CVE-2026-96227). Unauthenticated attackers can upload files executing JS. Restrict uploads & monitor for patches. https://radar.offseq.com/threat/cve-2026-96227-cwe-79-cross-site-scripting-xss-in-piotnet-forms-5a16ad1f17e57c01 #OffSeq #WordPres...

Ad Inserter plugin (WP, 2.8.12 – 2.8.18) hit by CRITICAL code injection. Subscriber users can run PHP or serve XSS. Upgrade to 2.8.19+ now. https://radar.offseq.com/threat/cve-2026-81655-cwe-94-improper-control-of-generation-of-code-code-injection-in-ad-inserter-d330f89b1f759aca #OffSeq #WordPres...