256 Newsroom — Uganda's Digital News Infrastructure
Consumer Technology

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP - The Hacker News

Published by Internet By The Hacker News · 7 August 2026 at 15:56
Share
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP - The Hacker News
Image · Internet

What the report says

WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.

Read the full report at Internet →

Loading debate for this article…

Other publishers covering this story

No additional verified coverage is currently clustered with this report.

More stories by this journalist

Other publications from this journalist — open any story without leaving the article page.

No other published stories from this publisher yet.

Related reporting

MUMSA Daawa Show Calls on Parents to Reclaim Role in Child Upbringing Amid Digital DistractionsNile Post Free internet access excites traders in Oyam marketThe Observer LG officially denies reports that its smart TVs are secretly recording users - MashableMashable Nintendo Customer Appreciation sale: Best deals you can still grab - MashableMashable Professor Layton studio Level-5's CEO admits using AI to make its digital showcase "more spectacular" - Eurogamer.netEurogamer.net Diablo 4 Annual Expansions Are Done As Blizzard Focuses On Seasonal Stories Leading Up To Diablo 5 - KotakuKotaku