Awesome Motive

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenSep 25, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

WordPress 7.1.4 fixes 22 flaws, including upgrade RCE

The unauthenticated race needs a seconds-long update window and a web-reachable wp-content/upgrade directory; backports reach 4.7.39.

Patchstackupdated Oct 30, 14:08 UTC · 10h agofirst Oct 28, 18:34 UTC · 2d agoVulnerability 9 sources1

WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments

WordPress patched CVE-2026-93485, a stored XSS called Comment2Shell that can lead to admin-triggered command execution.

Cyber Security NewsSep 25, 12:16 UTC · Sep 25, 2026Exploit / PoCCVE-2026-934853 · 1 read

Related CVEs

by mentions

CVE-2026-93485<1%7.1
Unauthenticated Stored DOM-Based XSS in WordPress Core Affecting 4.7–7.0
published Sep 18, 2026Automattic WordPress (core)PoC ×3

Appears with

WordPressvendor · 2
WordPressproduct · 1
WordPressorganization · 1
Patchstackorganization · 1

Entities are extracted by the model from each article. First seen Sep 25, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.