CVE-2026-64638 – CyberSecurityBoard

Cyber News

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

Cybersecurity researchers have uncovered a supply chain attack targeting WordPress plugin vendor BdThemes, leading to the temporary suspension of several plugins from…

backdoor BdThemes Biggopti command-and-control

August 11, 2026

Critical CVEs

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors Ravie LakshmananAug 10, 2026Cybersecurity / Hacking A lot…

CVE-2026-14869 CVE-2026-15307 CVE-2026-16496 CVE-2026-16498

August 10, 2026

Critical CVEs

WordPress Pre-Auth XSS Flaw CVE-2026-64638 Could Lead to PHP Code Execution

WordPress has released a critical security update to address a pre-authentication reflected cross-site scripting (XSS) vulnerability that affects all versions of the…

CVE-2026-50522 CVE-2026-64638 PHP code execution pwn.ai

August 7, 2026

Critical CVEs

CVE-2026-64638: WordPress Pre-Auth Reflected XSS (XSS2Shell)

CVE-2026-64638 is a pre-authentication reflected XSS vulnerability in WordPress, rated 8.9 on the CVSS scale, that can be exploited to achieve PHP…

CVE-2026-64638 PHP code execution WordPress XSS

August 7, 2026