Security watch

Advisories matched to the portfolio

Drupal security advisories, WordPress core releases and plugin vulnerability feeds, matched to the exact installed versions on every MU site. One click queues a fast-track cycle for all affected sites.

Preview. Sites and customers below are sample data. Pantheon SSO and live MU data from portal.ps-pantheon.com come next.
criticalSA-CORE-2026-007 · drupal/core · published Oct 14 · fixed in 10.4.8 / 11.2.5

Drupal core: access bypass in JSON:API

Northwind UniversityPremiumAtlas FoundationPremiumKeystone CountyPremiumRedwood Science MuseumLiteCascade Energy Co-opLite
highWP-2026-1012 · wordpress/core · published Oct 12 · fixed in 6.8.3

WordPress 6.8.3 security release (stored XSS)

Summit Credit UnionPremiumBrightPath SchoolsPortfolio
moderateWPF-2026-3391 · gravityforms · published Oct 10 · fixed in 2.9.19

Gravity Forms: authenticated file upload

Summit Credit UnionPremium