PHP project issues critical security release; sites urged to update
Two critical flaws affect any PHP application; no WordPress update is planned, and PHP before 8.2 is unsupported.
68
Organization
WordPress
- Mentions · 7d0
- Mentions · 30d4
- All mentions24
- First seenAug 15, 2026
- Last mentioned9d ago
Timeline
24 articles · newest firstCyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Russian-speaking broker 'CyberXero' used Claude Code agents and Cobalt Strike to steal 628,000+ Ukrainian records via WordPress and critical infrastructure attacks.
80
WordPress 7.1.3 Security Release
WordPress 7.1.3 patches seven flaws, including unauthenticated comment leaks and stored XSS, and is not an emergency.
64
Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials
LevelBlue exposed the TIKTOUK toolkit harvesting ~50,000 credentials from 37,000 domains via exposed WordPress backups, including active AWS keys.
65
SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor
Sucuri documents SC, a self-healing WordPress malware mesh persisting across files, database, and shared memory, regenerating within seconds of cleanup.
48
Quarterly WordPress Threat Intelligence Report – Q2 2026
Wordfence publishes its Q2 2026 WordPress threat intelligence report summarizing vulnerabilities, attacks, and mitigation trends.
28
28th September – Threat Intelligence Report
Check Point's weekly report covers ShinyHunters' FBI jobs-site breach, Bitget's $351.6M wallet theft, and actively exploited critical RCEs in Check Point and F5 products.
80
WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments
WordPress patched CVE-2026-93485, a stored XSS called Comment2Shell that can lead to admin-triggered command execution.
71
WordPress patches a critical severity security vulnerability
WordPress patched critical unauthenticated RCE CVE-2026-87902 in 7.1.2; attackers weaponized pearcmd.php within hours of disclosure.
91
Critical WordPress Vulnerability Exploited Immediately After Disclosure
Attackers began exploiting critical WordPress path-traversal CVE-2026-87902 for remote code execution within hours of disclosure.
86
Hackers start exploiting critical WordPress flaw for code execution
Attackers are exploiting critical WordPress flaw CVE-2026-87902 for unauthenticated code execution.
88
Critical WordPress Flaw Lets Unauthenticated Attackers Execute Remote Code
WordPress 7.1.2 patches a critical CVSS 9.2 path traversal flaw (CVE-2026-87902) that could allow unauthenticated RCE under specific theme and server configurations.
85
Critical WordPress Core Vulnerability Lets Attackers Execute Code Without Logging In
WordPress 7.1.2 patches a critical unauthenticated remote code execution flaw (CVE-2026-87902) in the core template resolution mechanism.
85
PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core
WordPress patched a critical unauthenticated path traversal that can enable PHP inclusion and RCE.
78
WordPress: Unauthenticated path traversal leading to conditional RCE
WordPress advisory discloses an unauthenticated path traversal in core that can lead to conditional remote code execution.
68
WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE
WordPress 7.1.2 fixes unauthenticated LFI CVE-2026-87902 that can reach remote code execution.
78
WordPress 7.1.2 Release
WordPress 7.1.2 patches critical unauthenticated local file inclusion that can lead to remote code execution.
80
WordPress Patches ‘Click2Shell’ Vulnerability
WordPress 7.1.1 patches Click2Shell, a theme-preview flaw that can lead to remote code execution.
76
Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites
WordPress 7.1.1 patches Click2Shell, which can force theme installs and enable PHP code execution.
62
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation
GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.
80
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
WordPress 7.1.1 patches Click2Shell, a flaw letting crafted links force-install themes on admin visits, chainable to remote code execution; no exploitation observed.
70
WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal
WordPress 7.1.1 patches 11 core vulnerabilities, including stored XSS in wpautop() and an authenticated path traversal in the REST Templates Controller reported by Anthropic.
50
WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review
WordPress.org now runs AI-powered automated security reviews on every plugin release, automatically blocking high-risk updates before distribution to millions of sites.
58
Wordpress Fixes Critical Plugin
WordPress maintainers patched a critical vulnerability in a widely used plugin, urging site owners to update before potential exploitation.
52
Related CVEs
by mentions- CVE-2026-8790296%8.1Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2)
- CVE-2026-6303011%9.8WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
- CVE-2026-601375%5.9WordPress Core SQL Injection via WP_Query author__not_in (CVE-2026-60137)
- CVE-2026-3491090%10.0Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
- CVE-2026-72733%8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
- CVE-2026-4815<1%8.7A SQL Injection vulnerability has been found in Support Board v3.7.7
- CVE-2026-797565%8.7Unauthenticated OS Command Injection in Nuclio Dashboard (Local/Docker Platform)
Appears with
- WordPressvendor · 16
- WordPressproduct · 13
- Patchstackorganization · 5
- Anthropicorganization · 3
- Wordfenceorganization · 3
- pwn.aiorganization · 2
- WordPress 7.1.1product · 2
- Mobile Repair Zoneproduct · 2
- OpenAIorganization · 1
- Red Heronmalware · 1
- Awesome Motiveorganization · 1
- LevelBlueorganization · 1
- ZyXEL GS1900product · 1
- Bitgetorganization · 1
- Giteavendor · 1
- Jetpack Scanproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.