PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain

On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to...

CVE-2026-60137

creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbqes2k2a 2026-07-17 21:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqd5kxgq2i 2026-07-17 22:19:07+00:00| seen|...