WordPress’s Login Page Had a Pre-Auth Path to Full Server Takeover: What XSS2Shell Actually Chains

WordPress 7.0.3 arrived on August 6, 2026, as an emergency security release, and one of the flaws it closes had been sitting in WordPress core…

WordPress 7.0.3 arrived on August 6, 2026, as an emergency security release, and one of the flaws it closes had been sitting in WordPress core…
On July 17, 2026, WordPress released versions 6.9.5 and 7.0.2 to fix two vulnerabilities in WordPress core, now tracked together under the nickname wp2shell. Four…

WordPress 7.0 “Armstrong” has been available since May 20, 2026, named after the jazz trumpeter Louis Armstrong and built by more than 875 contributors, with…

WordPress 7.0 “Armstrong” shipped on May 20, 2026, named after the jazz trumpeter Louis Armstrong and built by more than 875 contributors. It carries the…

WordPress 6.9 “Gene” arrived on December 2, 2025, and WordPress 7.0 “Armstrong” followed on May 20, 2026. Between those two releases, the project quietly added…

WordPress 7.0 “Armstrong” has been available since May 20, 2026. Named in honour of the legendary jazz trumpeter Louis Armstrong, this release marks the start…