{"uuid": "5329024e-e5c9-42e6-b2e3-5bd30fdc09d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93485", "type": "seen", "source": "https://t.me/CyberDispatch/3034", "content": "WordPress \"Comment2Shell\" vulnerability (CVE-2026-93485) can turn an anonymous comment into server code execution through a logged-in admin session.\n\nThe chain starts as stored XSS, fires when the page loads, and can use the admin\u2019s session to upload a web shell.", "creation_timestamp": "2026-09-22T06:44:44.000000Z"}