WordPress.org News

wordpress-org-news · A · candidate

vulnsvendor-psirtlang: enfetch failures: 0quiet periods: 0last fetch: never

ADDED as candidate by the 2026-07-18 weekly quality audit: WordPress core security releases (e.g. 7.0.2 / WP2Shell pre-auth RCE chain, 2026-07-17) had no curated discovery path — the release post is the vendor-primary for core CVEs affecting the huge Swiss/EU public-sector WordPress estate. Low cadence, high signal on security releases; the news feed carries them all. Promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

WP2Shell: pre-auth RCE chain in stock WordPress core (CVE-2026-63030 + CVE-2026-60137) — out-of-band 7.0.2 patch, exploitation expected short-term2026-07-18