PWN.AI (Nigusu Kasahun)
pwn-ai · B · candidate
Discovered 2026-08-10 via W1 (weekly 2026-08-10T0110Z-weekly): discovering-researcher primary for CVE-2026-64638 (XSS2Shell), a WordPress Core pre-authentication XSS-to-RCE chain, with full root-cause depth including the sanitiser parser differential and the Application-Password capture step. Original disclosure, not aggregation. Re-added after the publish-time sources.json merge resolved --theirs and dropped the original addition. Candidate — promote to active after 3 runs with content contribution.
Cited in 0 entries
Not cited in any entry yet.