Tag: Wordpress

Week 45 – Checked and Betrayed in WordPress Core

02 – 08 Nov 2026 What happens when a security check gives attackers just the opening they need? This week’s CVE of the Week explores CVE-2026-119977, a high-severity WordPress vulnerability that could allow unauthenticated attackers to execute malicious code by exploiting a race condition during …

Week 43 – PHP2Shell: Critical vulnerabilities threatening millions of websites

19 – 24 Oct 2026 Two recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have received critical CVSS scores of 9.2. These flaws in PHP’s memory management and error handling can allow unauthenticated remote code execution (RCE), potentially affecting websites running popular platforms such as WordPress, …