A WordPress core stored XSS vulnerability found by Klikki was fixed - reported a month ago as a side product of the Uber bug hunt.

In the news:
Uber Pays Researcher $10,000 for Critical Flaw (SecurityWeek)
Uber Pays Researcher $10k for Login Bypass Exploit (Threatpost)

All-in-One Event Calendar by Time.ly stored XSS and SQL injection Read more »

Yahoo Mail vulnerability found by Klikki Oy could compromise or infect email accounts. Vulnerability patched earlier this month.
Read more »

Another WordPress stored XSS found by Klikki back in November 2014 patched.
Read more »

A zero day vulnerability in Unity Web Player.
Read more »  Vulnerability test »

In the news:
Just-released WordPress 0day makes it easy to hijack millions of websites (Ars Technica)
Hackers can infiltrate WordPress sites through comments section (The Hill)
WordPress Under Attack As Double Zero-Day Trouble Lands (Forbes)
Millions of Wordpress sites are vulnerable to this major security flaw (Business Insider)

WordPress vulnerable to another comment XSS exploit identified by Klikki.
Read more »

Adobe released patches for two critical Flash vulnerabilities reported by Klikki: a "double free" bug and unrestricted video/audio recording on the target system.

Read more » Video demo »

In the news:
Facebook, Researcher Quarrel Over Bug Reward Eligibility (SecurityWeek)
Apple Fixes Cookie Access Vulnerability in Billions of Safari Devices (Kaspersky Threatpost)
Apple splats Safari flaw affecting a BEELLION iThings (The Register)
Flash Player Bug Allows Video, Audio Recording Without User Content (Softpedia)

Safari cross-domain vulnerability found by Klikki affects close to 1 billion mobile and desktop devices (iOS, OS X, Windows). Patches available now. Read more » Vulnerability test »

Five vulnerabilties, including a critical SQL injection, in WPML (sitepress-multilingual-cms) WordPress plug-in. Patch available. Updated March 13. Read more »

Critical WordPress security vulnerability discovered by Klikki Oy affects tens of millions of web sites:
Press release »  Technical advisory »  Vulnerability test »