Tag: XSS Vulnerability

A critical XSS2Shell vulnerability, tracked as CVE-2026-64638, was recently discovered in WordPress Core, allowing remote code execution from a single failed login attempt. This flaw affected nearly all actively maintained WordPress installations, putting over 500 million sites at risk. WordPress released an emergency fix in version 7.0.3 on August 6, 2026, urging all administrators to update immediately.