⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More
Summary: Searchlight Cyber disclosed a pre-authenticated remote code execution flaw in WordPress Core, formed by chaining CVE-2026-63030 (REST API batch-route confusion) with CVE-2026-60137 (SQL injection), exploitable anonymously on a standard install with no plugins required. watchTowr reported proof-of-concept exploits already in circulation and early signs of in-the-wild exploitation, and the recap also lists SharePoint, ADFS, Zoom, SAP, RabbitMQ, n8n, Splunk, F5 NGINX, and other CVEs marked for urgent patching.
What's compelling: WordPress runs on hundreds of millions of websites, and as watchTowr CEO Benjamin Harris put it, hosting providers will auto-patch some of them but plenty will not - and that is where the damage will be done.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-14266CVE-2026-14890CVE-2026-14960CVE-2026-14961CVE-2026-15053CVE-2026-15265CVE-2026-15682CVE-2026-20296CVE-2026-20297CVE-2026-27690CVE-2026-33894CVE-2026-33895CVE-2026-42533CVE-2026-44747CVE-2026-44761CVE-2026-44909CVE-2026-53412CVE-2026-54305CVE-2026-54523CVE-2026-56155CVE-2026-56164CVE-2026-56434CVE-2026-57219CVE-2026-57221CVE-2026-58644CVE-2026-59084CVE-2026-59173CVE-2026-59208CVE-2026-59762CVE-2026-60005CVE-2026-60105CVE-2026-60137CVE-2026-63030CVE-2026-6423CVE-2026-6875
- Related