WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments
WordPress patched CVE-2026-93485, a stored XSS called Comment2Shell that can lead to admin-triggered command execution.
5
1 stories, newest first · one card per story
WordPress patched CVE-2026-93485, a stored XSS called Comment2Shell that can lead to admin-triggered command execution.
Today 1.6K readers · 2.5K views · 780 reads · all time 189K views