Membership applications, event registration, abstract submissions, the ethics form. On most association Drupal sites that is all one module, and on September 23 it had a bad day.
Read Article →Your scholarship application asks for a transcript and your conference form asks for a CV. Both let a stranger put a file on your server. Here is a twenty-minute triage...
Read Article →Forminator shipped four security releases in about four weeks, the last of them CVE-2026-18325, a stored cross-site scripting flaw Wordfence rated 7.2. The coverage has the classification wrong, and the...
Read Article →A high-severity Gravity Forms vulnerability was patched on August 20. Free Wordfence users do not receive the firewall rule until September 12. Here is what that gap actually means and...
Read Article →