Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
20 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_12ada55f529c40fc58Collection status unverifiedLast successful batch: Unverified
src_7706c53fe6d3939218Collection status unverifiedLast successful batch: Unverified
src_c89c4b58b213548079Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
WordPress has released security updates for a critical unauthenticated path traversal vulnerability that can lead to local PHP file inclusion and, on affected server and theme configurations, remote code execution. Site owners should update WordPress Core immediately. The post PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core appeared first on Wordfence.
First reported Sep 22, 2026 22:21 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
In June 2026, the Wordfence Bug Bounty Program received 1066 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelligence team, with validated vulnerabilities responsibly disclosed to vendors, often through the Wordf
First reported Sep 25, 2026 16:52 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Last week, there were disclosed in that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, ...Read More The post W
First reported Sep 17, 2026 17:47 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Last week, there were disclosed in that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, ...Read More The post W
First reported Oct 01, 2026 18:17 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Wordfence Argus discovered a PHP Object Injection vulnerability in Tutor LMS, affecting more than 100,000 WordPress sites. Subscriber-level attackers could achieve remote code execution. Update to version 4.0.8 as soon as possible. The post 100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS appeared first on Wordfen
First reported Sep 17, 2026 20:17 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Wordfence 9 introduces passkeys, and passkeys provide a huge friction reduction because your user no longer has to remember their password or retrieve it from a password manager and copy/paste. The post Boost Engagement with Free Passkeys by Wordfence appeared first on Wordfence.
First reported Sep 15, 2026 19:55 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Wordfence Argus found a critical CVSS 9.8 vulnerability in libheif, a library many servers use to process HEIC images. We demonstrated protected-file disclosure and code execution on one exact WordPress deployment. Exploitation is target-specific, but HEIF Heist shows that adapting image exploits to real systems is practical. The post Wordfence Argus Discovers Critical Vulnerability in libheif, th
First reported Sep 18, 2026 18:22 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
The Wordfence Threat Intelligence Team identified an interesting malware sample in mid June during a site clean. TThe malware was installed as a must-use plugin with several self-healing mechanisms in place in order to survive removal The post Inside a Malicious, Stealthy WordPress Must Use Plugin appeared first on Wordfence.
First reported Sep 22, 2026 14:56 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Last week, there were 358 vulnerabilities disclosed in 243 WordPress Plugins and 4 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 184 Vulnerability Researchers that contributed to WordPress Security last week. The post Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026) appeared first on
First reported Sep 24, 2026 17:44 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
In today’s digital age, financial institutions rely heavily on encryption to protect sensitive data in their banking applications. However, despite the critical role of cryptography, many implementations suffer from fundamental flaws that create a false sense of security. Misconceptions about […] The post How Poor Cryptographic Practices Endanger Banking Software Security appeared first on WeSecur
First reported Jun 05, 2024 12:57 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
It’s 3 am. Your phone screams. Hackers are in your system. Panic sets in. But wait! Your Blue Team has been sharpening its skills, thanks to the relentless challenges posed by the Red Team. Red Team vs Blue Team isn’t […] The post Red team vs Blue team: A CISO’s Guide to Offensive Security appeared first on WeSecureApp :: Securing Offensively.
First reported Jul 04, 2024 06:09 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Have you ever gotten that sinking feeling that your personal information might be out in the open? At WeSecureApp we monitor several major breaches that occurred this month, exposing a wide range of data from financial information to phone numbers. […] The post Data Breaches in June 2024 – Infographic appeared first on WeSecureApp :: Securing Offensively.
First reported Jul 03, 2024 13:29 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Did you know? As per Microsoft, more than 95 percent of Fortune 500 companies use Azure. A staggering number, right? But does that make Azure impenetrable? Hackers think otherwise! In fact, Azure is an attractive target for them. Azure has […] The post Azure Penetration Testing – Cloud Security Audits | Microsoft appeared first on WeSecureApp :: Securing Offensively.
First reported May 20, 2024 07:10 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Migrating your business to the Amazon Web Services (AWS) cloud can be a game-changer, offering scalability, flexibility, and cost-efficiency. But hold on a second! Just like a shiny new car needs insurance, your AWS environment needs robust security measures. Here’s […] The post AWS Penetration Testing | Amazon Cloud Security appeared first on WeSecureApp :: Securing Offensively.
First reported May 17, 2024 12:31 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
In mobile penetration testing, third-party modules or libraries are often considered out of scope for several reasons, although it’s worth noting that the decision to include or exclude third-party components can vary depending on the specific requirements of the assessment […] The post Mobile SDK Security: Effective Testing Methodology appeared first on WeSecureApp :: Securing Offensively.
First reported Jun 17, 2024 12:54 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Has your data ever felt…exposed? We’ve all heard about data breaches, but have you ever stopped to wonder what the real impact is? At WeSecureApp, we track cyber threats closely, and this month, we’re here to shed light on what […] The post Data Breaches in May 2024 – Infographic appeared first on WeSecureApp :: Securing Offensively.
First reported Jun 03, 2024 07:25 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
In an era where cyber threats are becoming increasingly sophisticated, securing sensitive data has never been more crucial. Device binding stands out as a vital strategy in the fight against unauthorized access. By ensuring that specific devices are uniquely tied […] The post Device Binding to Protect Your Banking and UPI Apps appeared first on WeSecureApp :: Securing Offensively.
First reported May 22, 2024 12:40 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Cloud Platforms are being adopted at an increasingly rapid pace. Cloud platforms like Google Cloud Platform (GCP) offer incredible scalability, agility, and cost-efficiency. However, this shift presents a new set of security challenges for companies. Traditionally, organizations maintained complete control […] The post GCP Penetration Testing | Google Cloud Platform Security appeared first on WeSe
First reported May 21, 2024 06:34 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Hello everyone, I’m excited to share some big news with you today. WeSecureApp is evolving into Strobes Security. This isn’t just a new name – it’s a reflection of our commitment to providing a comprehensive Continuous Threat Exposure Management (CTEM) […] The post WeSecureApp is Now Strobes: A Message from Our CEO appeared first on WeSecureApp :: Securing Offensively.
First reported Sep 03, 2024 10:01 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal
First reported Sep 02, 2026 11:48 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.