sign in--:--:--UTC

CVE-2026-93485

☆ pin

CVSS

7.1

Reports

2

First seen

Sep 22, 2026

Last seen

Oct 5, 2026

Affected product

WordPress 4.7 through 7.1

Associated actors

KillSec ×1 RatHat operators ×1 ShinyHunters ×1 Star Blizzard ×1 Storm-3069 ×1

Recent reports

Weekly Recap: NetScaler and FortiMail Zero-Days, KillSec Arrests, Spectre v2 Variant

The Hacker NewsOct 5, 2026 High

WordPress Comment2Shell Vulnerability Allows RCE via Admin Session Hijacking

The Hacker NewsSep 22, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans