Vulnerabilities
Update Craft CMS to 5.11.0 to Fix Authenticated Remote Code Execution Flaw
A high-severity vulnerability in Craft CMS versions prior to 5.11.0 allows authenticated users to execute arbitrary code on the server.
Craft CMS
Everything Patch Review has reported about Craft CMS: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch Craft CMS Before 5.11.0 to Stop Authentication Bypass
Attackers can reuse email codes to reset passwords and take over accounts in older Craft CMS versions.