home.social

#vulnerability_intelligence — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #vulnerability_intelligence, aggregated by home.social.

fetched live
  1. ZEN SecDB @[email protected] ·

    🚨 wp2shell affects multiple vulnerabilities (CVE-2026-63030, CVE-2026-60137).

    - CVE-2026-63030 (HIGH) - WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
    - CVE-2026-60137 (CRITICAL) - WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

    Running WordPress? Check your versions and patch to 6.8.6 / 6.9.5 / 7.0.2. If you can't patch immediately, apply the mitigations in the meantime.

    ℹ️ Additional information on ZEN SecDB
    secdb.nttzen.cloud/updates/a5a

    #infosec #wordpress #rce #sqlinjection #cve202663030 #cve202660137
    #nttdata #zen #secdb #vulnerability_intelligence

    #infosec #wordpress #rce #sqlinjection #cve202663030 #cve202660137