{"uuid": "3e6978fa-20d3-4847-92fd-3731abb0ba1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93485", "type": "seen", "source": "https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html", "content": "A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server.\n\nWordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed \"Comment2Shell,\" on September 17 in version 7.1.1 and told site owners to update right away. There is", "creation_timestamp": "2026-09-22T10:00:44.192017Z"}