This article covers recent vulnerabilities found to be actively exploited. They are categorised based not only on the category of exploitation, but their impact, and versions affected. This article also informs on any official fix and remediation guidance for the listed vulnerabilities.

Malicious code was discovered in the upstream tarballs of XZ Utils, starting with version 5.6.0. Under the right circumstances this could potentially enable a malicious actor to gain unauthorised remote access to a system remotely via protocols including SSH, leading to potential total compromise and sequestration of the system.

AppCheck has identified multiple Cross-Site Scripting vulnerabilities within the popular “Photo Gallery” Wordpress plugin by 10Web. Full vulnerability detail and remediation advice within.