Stock WordPress pingback can crash workers via Brotli CVE-2026-111497
WordPress does not ship Brotli, but libcurl unpacks attacker-supplied br replies before WordPress sees them.
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #xmlrpc