CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-65640: WordPress Core Postscript RCE

August 17, 2026

High-severity WordPress core vulnerability enabling remote code execution via malicious Postscript file upload by Author-level users. Affects versions 4.7 to 7.0. Patched in 7.0.4.