LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

WordPress CVEs

Every WordPress vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

3Tracked CVEs 3Known exploited 1Critical 9.0+ 0Covered this week
All Known exploited Critical High This week
3 CVEs EPSSCoverage
8.1CVSS 3.1 CVE-2026-87902 Exploited WordPress Core Remote File Inclusion Vulnerability WordPress · Core EPSS 96% 1 story 2 months ago 9.8CVSS 3.1 CVE-2026-63030 Exploited WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution WordPress · Core EPSS 11% 2 stories 4 months ago 5.9CVSS 3.1 CVE-2026-60137 Exploited WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query WordPress · Core EPSS 5.3% 2 stories 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed