Vulnerability

CVE-2026-60137

In 3 briefs, most recently 22 July 2026. RSS for this tag

Published 2026-07-17

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

WordPress Core SQL Injection Vulnerability.

Added 2026-07-21

Coverage in DanSec Daily

  1. WordPress wp2shell webshell attacks, Microsoft SharePoint RCE exploitation, and Anubis ransomware targeting Coca-Cola's Fairlife.
  2. Hugging Face breach by an autonomous AI agent, Estée Lauder and EY data breaches, and actively exploited ServiceNow and SonicWall zero-days.
  3. Hugging Face breach tied to an autonomous AI agent, SonicWall SMA 1000 zero-days giving root access, and WP2Shell WordPress flaws exploited in the wild.