{"uuid": "3824fbaa-1f71-4d0c-a124-d28ce24f7769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-21T23:00:05.818105Z"}