CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution Vulnerability Report CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution Do Son August 7, 2026 0 TL;DR WordPress 7.0.3 is out as a security release. This WordPress security update fixes about a dozen... Read More Read more about CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution