Critical WordPress Core Vulnerability
On July 17, 2026, the WordPress Security Team released urgent security updates addressing a critical vulnerability chain in WordPress core affecting versions 6.8 through 7.0.1. Two flaws, CVE-2026-60137 (SQL Injection) and CVE-2026-63030 (Remote Code Execution), can be chained to allow unauthenticated attackers to take complete control of vulnerable sites. No plugins required. No authentication needed. Update to 6.8.6, 6.9.5, or 7.0.2 immediately.