Blog

Filtered by:🟠 High×Clear filters
WordPress Core "XSS2Shell" Vulnerability (CVE-2026-64638): How a Simple Login Bug Leads to Full Server Takeover
08/12/2026🟠 High

WordPress Core "XSS2Shell" Vulnerability (CVE-2026-64638): How a Simple Login Bug Leads to Full Server Takeover

The critical XSS2Shell vulnerability (CVE-2026-64638) in WordPress Core allows unauthenticated attackers to hijack administrator sessions and execute PHP code on the server.