Boreas37/CVE-2026-64638-PoC-XSS2Shell-: xSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC
CVE-2026-64638 · Reflected XSS on wp-login.php · CVSS 8.9 (v4.0) · Patched in WordPress 7.0.3 ⚠️ AUTHORIZED TESTING ONLY. This tool is for security research and authorized penetration testing against ...
Continue Reading