Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 3h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 6h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 6h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 7h Vulnerabilitas in software Sparx Systems Enterprise Architect · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilitates in Slican telephonis · 8h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 11h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 11h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 12h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 3h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 6h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 6h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 7h Vulnerabilitas in software Sparx Systems Enterprise Architect · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilitates in Slican telephonis · 8h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 11h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 11h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 12h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-60137

CRITICAL CVSS 9.1 CVSS 3.1 📌 Analyzed

CVE-2026-60137 - WordPress Core SQL Injection Vulnerability - [Actively Exploited]

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

Publicatum: Jul 17, 2026 20:17

Ultima Mutatio: Oct 08, 2026 10:35