Privilege Escalation

Everything Patch Review has reported about Privilege Escalation: 2 stories, newest first. Part of our Cloud Security coverage.

Vulnerabilities

Disable Tonda Membership Plugin Versions 1.0.1 and Below to Stop Critical Admin Takeover

A critical flaw in the Tonda Membership plugin allows attackers to gain full administrative control without any login credentials, requiring immediate action for site owners.

Oct 11, 2026

Cloud Security

Cloud Metadata Service Attacks: How They Work and How to Stop Them

Attackers exploit metadata services to steal cloud credentials, bypassing network controls by targeting the local instance rather than external endpoints.

Oct 9, 2026