PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain

On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to...

CVE-2026-63030

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-17 22:19:07+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o 2026-07-17 22:53:06+00:00| seen|...