{"uuid": "ce9c3f6d-2853-498c-ab8d-8e2a7173f624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3msl5l4dfdm42", "content": "WordPress RCE. Every version ever released (except the latest, 7.0.3). 500+ million sites. 43% of the Internet-facing sites. Hacker's paradise.\n\n\"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)\":\n\nhttps://pwn.ai/blog/xss2shell", "creation_timestamp": "2026-08-08T13:13:15.987838Z"}