Web Hack List

Preliminary research

XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Record

Researcher
Nigusu Kasahun
Date

In the archive

Related sources

This page is the archive's own catalogue record. The research is the work of Nigusu Kasahun, first published at the original source. Preserved copies are kept so the citation survives its host.