LiteSpeed Cache Vulnerability: Update to 7.9.2 Before November 22

LiteSpeed Cache 7.9.2 XSS fix: unauthenticated bug, update today. Injected.Website

The quick answer Every version of the LiteSpeed Cache plugin below 7.9.2 has a stored cross-site scripting bug, tracked as CVE-2026-113499 and rated 7.5 (High). Someone with no account on your site can trigger it through a published comment. If you run LiteSpeed Cache, update it to 7.9.2 or later today. No attacks have been […]

WordPress Security Update 7.1.4: 22 Holes Closed. Is Yours Still Open?

WordPress Security Update 7.1.4: 22 holes closed. Is yours still open? Injected.Website

The quick answer WordPress 7.1.4 came out on October 28, 2026. It closes a batch of security holes, and one of them is a bug in the core update process that WordPress says could lead to remote code execution. If your site runs anything from 4.7 to 7.1.3, update to the patched release for your […]