07/21/2026
https://zurl.co/Ef80l
If your site is built on WordPress, be sure to check for new administrator accounts, unknown plugins and suspicious other suspicious files, even if you have updated / patched.
Attackers are chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.