{"uuid": "5bd0762b-d5e0-41e2-a1a4-555aa573585b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msk6dufe5c2x", "content": "WordPress XSS2Shell CVE-2026-64638: A Critical Login-Page Flaw That Could Turn a Simple XSS Into Full Server\u00a0Takeover\n\nIntroduction: When the WordPress Login Page Becomes the Attack Surface WordPress powers an enormous portion of the modern web, which makes vulnerabilities in its core components\u2026", "creation_timestamp": "2026-08-08T03:54:25.166157Z"}