statementSaid on 2026-07-21
The vulnerability exists in WordPress 6.9.x (up to 6.9.5) and 7.0.x (up to 7.0.2) versions.
A statement by turansecurity, said on 2026-07-21. Statements are as reported by the cited publishers — not verified by DecisionGateway.
Zaiflik WordPress 6.9.x (6.9.5 gacha) va 7.0.x (7.0.2 gacha) versiyalarida mavjud.
Related claims
A serious vulnerability rated 9.8 was discovered in WordPress (CVE-2026-63030).turansecurity · investigationDue to a serious vulnerability in the WordPress system and the REST API mechanism, an attacker can remotely break into the server without any additional information (such as login-password) (RCE).turansecurity · statementThe site should be urgently updated to WordPress 7.0.2 or 6.9.5 version.turansecurity · commitmentThe vulnerability has a severity rating of Critical with a CVSS score of 10.0.Turan Security xavfsizlik byulleteni · statementAll versions prior to 26.7.2, 26.6.6 and 26.4.15 (LTS) are affected.turansecurity · statementA critical Path Traversal / Arbitrary File Read vulnerability, CVE-2026-85706, was identified in GitLab CE/EE systems.Turan Security xavfsizlik byulleteni · investigation
More claims by turansecurity
Red Hat Build of Keycloak users should apply RHSA-2026:56519 / 56520 / 56523 / 56524.commitmentUpgrade to 26.7.2 / 26.6.6 / 26.4.15 (LTS); the fix is also available in 26.8.0.commitmentUnsupported branches (26.5, 26.3 and older) will not be fixed and remain permanently vulnerable until upgraded.predictionAll versions prior to 26.7.2, 26.6.6 and 26.4.15 (LTS) are affected.statementExploit code has not yet been distributed, but the CVE is confirmed.statement
All claims by turansecurity