Three LiteSpeed Cache vulnerabilities, including stored XSS flaws CVE-2026-113499 and CVE-2026-113500, affect 7M+ WordPress sites. Update to 7.9.2. Related Posts: Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates The post LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS appeared first on Daily Cy

Jenkins patched 20 plugin vulnerabilities, including 7 Script Security sandbox bypasses that allow remote code execution on the controller. Update now. Related Posts: Apache NiFi Vulnerabilities Expose Data Pipelines to Attacks Unbound DNS Vulnerabilities Expose Resolvers to RCE CVE-2026-89775 (CVSS 9.3): Linux Kernel LPE to Gain Root Flaw in KVM The post Jenkins Patches 20 Plugin Flaws, Sandbox Bypasses Lead RCE appeared first on Daily CyberSecurity.

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.