<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Dynamiapps on Caleb Garber</title>
    <link>https://calebgarber.com/tags/dynamiapps/</link>
    <description>Recent content in Dynamiapps on Caleb Garber</description>
    <generator>Hugo -- 0.165.0</generator>
    <language>en-us</language>
    <lastBuildDate>Sun, 18 Oct 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://calebgarber.com/tags/dynamiapps/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>CVE Watch: 18 October 2026, a 9.1 authentication bypass in a booking plugin and an unauthenticated write into post metadata</title>
      <link>https://calebgarber.com/posts/cve-watch-2026-10-18/</link>
      <pubDate>Sun, 18 Oct 2026 00:00:00 +0000</pubDate>
      <guid>https://calebgarber.com/posts/cve-watch-2026-10-18/</guid>
      <description>CVE-2026-110653 is a race condition in the one-time passcode check of the LatePoint booking plugin that scores 9.1, and the rest of the 18 October batch is WordPress plugin access control and file handling bugs, none of them KEV-listed.</description>
    </item>
  </channel>
</rss>
