WordPress: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 1

• High 8.9
  CVE-2026-64638 Public exploit Scanner template

  WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted maliciou…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Aug 7, 2026

Revision history

1. 2026-09-21 #6

   PoC für CVE-2026-64638 (XSS2Shell) aufgenommen

2. 2026-09-20 #5

   Bezeichner "XSS2Shell" für CVE-2026-64638 ergänzt

3. 2026-08-12 #4

   Neue Updates von Fedora aufgenommen

4. 2026-08-10 #3

   Neue Updates von Debian aufgenommen

5. 2026-08-09 #2

   Referenz(en) aufgenommen: EUVD-2026-54565

6. 2026-08-06 #1

   Initiale Fassung

References

• WordPress 7.0.3 release notes vom 2026-08-06
  https://wordpress.org/news/2026/08/wordpress-7-0-3-release/
• GitHub Security Advisory GHSA-52p2-r8wf-jcrf vom 2026-08-06
  https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-52p2-r8wf-jcrf
• Debian Security Advisory DSA-6427 vom 2026-08-10
  https://security-tracker.debian.org/tracker/DSA-6427-1
• Fedora Security Advisory FEDORA-2026-61704C09EA vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-61704c09ea
• Fedora Security Advisory FEDORA-EPEL-2026-96FEEBE88A vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-96feebe88a
• Fedora Security Advisory FEDORA-EPEL-2026-4F38E2A6EB vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4f38e2a6eb
• Fedora Security Advisory FEDORA-EPEL-2026-C91A425A57 vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c91a425a57
• Fedora Security Advisory FEDORA-2026-DC0FF85B8B vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-dc0ff85b8b
• XSS2Shell: WordPress Preauth XSS to RCE Chain vom 2026-09-21
  https://github.com/madfxr/xss2shell-poc