#CraftCMS
LightNews LightNews
throwable.bsky.social
📦 craftcms/cms 5.12.1

Craft CMS

🔗 https://github.com/craftcms/cms
November 10, 2026 at 12:20 PM
throwable.bsky.social
📦 craftcms/apple-news 4.2.0

Publish Craft CMS entries to Apple News

🔗 https://github.com/craftcms/apple-news
November 10, 2026 at 5:12 PM
throwable.bsky.social
📦 craftcms/anchors 3.5.0

Add anchor links to headings in your Craft CMS website content.

🔗 https://github.com/craftcms/anchors
November 10, 2026 at 5:12 PM
throwable.bsky.social
📦 craftcms/craft-flysystem 2.0.2

Base Flysystem implementation for Craft CMS

🔗 https://github.com/craftcms/flysystem
November 8, 2026 at 9:59 AM
throwable.bsky.social
📦 craftcms/contact-form 3.2.0

Add a simple contact form to your Craft CMS site

🔗 https://github.com/craftcms/contact-form
November 10, 2026 at 5:12 PM
throwable.bsky.social
📦 craftcms/flysystem 2.0.2

Base Flysystem implementation for Craft CMS

🔗 https://github.com/craftcms/flysystem
November 8, 2026 at 9:59 AM
fortrabbit.com
Keep your software updated. CVE-2026-115934 lets anyone become admin on a Craft CMS site that uses craft.search. #CraftCMS github.com/advisories/G...
November 10, 2026 at 10:55 AM
throwable.bsky.social
📦 craftcms/commerce 5.7.8

Craft Commerce

🔗 https://github.com/craftcms/commerce
November 4, 2026 at 5:59 PM
craftcms.com
Craft 5.12 is here 🎉

Built-in MCP servers for connecting AI agents, a new authenticated GraphQL API, and more!

craftcms.com/blog/craft-5-1… #CraftCMS
Craft 5.12 Released | Craft CMS
Craft 5.12 is here, with built-in MCP servers, authenticated GraphQL, and more.
craftcms.com
November 3, 2026 at 8:03 PM
throwable.bsky.social
📦 liquidbcn/craftcms-rate-limit 2.2.2

Rate limiting abstraction which, in conjunction with your application's cache, provides an easy way to limit requests during a specified window of time.

🔗 https://github.com/LiquidBarcelona/craft-cms-rate-limit
November 10, 2026 at 4:00 PM
threatroundup.bsky.social
New critical vulnerability in craftcms cms: CVE-2026-124427, CVSS 9.3. Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL… No public exploit reported yet. #CVE #vulnerability

threatroundup.com/cve/cve-2026...
November 8, 2026 at 2:41 PM
euvd-bot.bsky.social
🚨 EUVD-2026-118288
📊 9.3/10
🏢 craftcms

📝 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118288

#cybersecurity #infosec #cve #euvd
November 10, 2026 at 12:07 AM
euvd-bot.bsky.social
🚨 EUVD-2026-120517
📊 9.3/10
🏢 craftcms

📝 An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search, allowing stacked query execution an...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-120517

#cybersecurity #infosec #cve #euvd
November 10, 2026 at 12:05 AM
euvd-bot.bsky.social
🚨 EUVD-2026-119569
📊 5.3/10
🏢 craftcms

📝 Craft CMS from 5.10.0 before 5.11.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to browse volumes the...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119569

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
throwable.bsky.social
📦 craftcms/shopify 7.4.0

Shopify for Craft CMS

🔗 https://github.com/craftcms/shopify
November 3, 2026 at 2:15 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119571
📊 8.7/10
🏢 craftcms

📝 Craft CMS from 5.0.0 before 5.11.2 contains a privilege escalation vulnerability that allows unauthenticated public registrants to reclaim deactivated ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119571

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119572
📊 7.1/10
🏢 craftcms

📝 Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated control panel users to read SVG files by pos...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119572

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119574
📊 6.9/10
🏢 craftcms

📝 Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows unauthenticated attackers to read content from sites outs...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119574

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119573
📊 9.3/10
🏢 craftcms

📝 Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section en...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119573

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119570
📊 8.7/10
🏢 craftcms

📝 Craft CMS from 5.10.0 before 5.11.2 contains a remote code execution vulnerability that allows non-administrator control panel users to obtain HMAC-sig...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119570

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 2:07 PM
threatroundup.bsky.social
🚨 Critical: CVE-2026-123488 in craftcms cms, CVSS 9.3. Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because… Public exploit code reported. #CVE #infosec

threatroundup.com/cve/cve-2026...
November 7, 2026 at 7:14 PM
uxi360.com
Build faster, scalable web apps with 𝗥𝗲𝗮𝗰𝘁.𝗷𝘀, 𝗡𝗲𝘅𝘁.𝗷𝘀 & 𝗟𝗮𝗿𝗮𝘃𝗲𝗹. 🚀

At 𝗨𝗫𝗜𝟯𝟲𝟬, we also build headless solutions with 𝗖𝗿𝗮𝗳𝘁 𝗖𝗠𝗦, 𝗦𝘁𝗮𝘁𝗮𝗺𝗶𝗰 & 𝗪𝗼𝗿𝗱𝗣𝗿𝗲𝘀𝘀 - from APIs and custom web apps to modern frontend experiences.

uxi360.com/services/rea...
#ReactJS #NextJS #CraftCMS #Statamic #WordPress #Laravel
Headless CMS Development with React.js | UXI360 InfoTech
Build modern headless websites with React.js and CMS platforms including Craft CMS, Statamic, WordPress and ExpressionEngine.
uxi360.com
November 5, 2026 at 6:49 AM
craftentries.io
Craft 5.12 is out. Most people will look at the MCP servers first, but on a bilingual site like CraftEntries, the new Sites pane is what I'll actually use every day. #craftcms

My write-up:
craftentries.io/articles/new...
CraftEntries | New in Craft CMS 5.12
Craft 5.12 came out this week. Most of the attention will go to the new MCP servers, but for a bilingual site like this one, the Sites pane is the more…
craftentries.io
November 5, 2026 at 1:25 PM
euvd-bot.bsky.social
🚨 EUVD-2026-118289
📊 7.1/10
🏢 craftcms

📝 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the sandbox-exposed getNext() and getPrev() ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118289

#cybersecurity #infosec #cve #euvd
November 6, 2026 at 6:02 PM
pingoru.bsky.social
🟠 Craft CMS is reporting a Partial Outage since 16:19 UTC

"Spoke & Chain is down"

Affects: Spoke & Chain

Live timeline → https://pingoru.io/providers/craft-cms/incidents/12479095

#CraftCMS #CraftCMSDown
Craft CMS: Spoke & Chain is down · November 10, 2026 · Pingoru
Craft CMS incident on November 10, 2026: Spoke & Chain went down. Started 4:19 PM UTC, resolved ongoing (● 6m). Affected: Demos (Spoke & Chain).
pingoru.io
November 10, 2026 at 4:26 PM