AIThe Hacker Newsabout 2 hours ago
WordPress Patches Critical XSS Flaw
1 min read
WordPress fixed a pre-auth XSS flaw in its login screen affecting all versions, tracked as CVE-2026-64638 with a CVSS score of 8.9. The bug can chain into PHP code execution under specific conditions. Patched August 6 in WordPress 7.0.3, with backports through the 4.7 branch.
Level
Hype check
Tap to vote and see what everyone thinks.
