LABS / PUBLICATIONS
WordPress
Research, published with evidence and technical context.
CVE-2026-18322: Analysis and Exploitation
CVE-2026-18322 is a critical vulnerability in the Smart Popup plugin for WordPress, enabling the creation of unauthorized WordPress administrators through three exploitable bugs. Active exploitation has been detected; however, version 1.13.0 includes…
CMS Media Timeleaks in Jetpack, WordPress and beyond: A Risky OpSec Issue
The article discusses an operational security issue regarding the image sitemap functionality in Jetpack and WordPress. It reveals that even after redacting sensitive images in posts, the original files may still be…