{"uuid": "ced0f53e-c3a2-4ab2-b613-28a6f2abd68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/thibaud.dev/post/3msurkzfvqr2p", "content": "500 millions de sites expos\u00e9s : une XSS pr\u00e9-auth (CVE-2026-64638) touche tout WordPress Core depuis la version 4.7.\n\nUn username malveillant suffit pour la XSS. Cha\u00een\u00e9 \u00e0 un clic admin, \u00e7a m\u00e8ne \u00e0 l'ex\u00e9cution PHP. Patchez en 7.0.3.\n\ngo.thibaud.dev/RPUj\n\n#WordPress #Security #dev", "creation_timestamp": "2026-08-12T09:05:03.537642Z"}