CPE
critical
threat
CVE-2026-63030: Critical Remote Code Execution Vulnerability in WordPress Core
2 TTPs 15 CVEs 8 IOCsCVE-2026-63030 is a critical unauthenticated remote code execution vulnerability affecting WordPress Core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1, allowing an unauthenticated attacker to execute arbitrary code via the WordPress REST API batch endpoint, potentially leading to complete website compromise.
exploited
PoC
WordPress Core 6.9.0 +51
wordpress
rce
web-vulnerability
cve
2t
15c
8i
updated
high
threat
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-15409)
2 TTPs 2 CVEs 6 IOCsA critical server-side request forgery (SSRF) vulnerability, identified as CVE-2026-15409, exists in SonicWall SMA1000 Appliances, allowing a remote, unauthenticated attacker to force the appliance to make requests to arbitrary internal or external locations, potentially leading to information disclosure or access to restricted network services.
exploited
PoC
SMA1000 Appliances +6
ssrf
vulnerability
cisa-kev
remote-code-execution
network-appliance
2t
2c
6i
updated