⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More
Searchlight Cyber disclosed a pre-authenticated remote code execution flaw in WordPress Core, formed by chaining CVE-2026-63030 (REST API batch-route confusion) with CVE-2026-60137 (SQL injection), exploitable anonymously on a standard install with no...