SERVER-WEBAPP CVE-2026-64638 WordPress XSS2Shell preauth XSS payload space-before-tag bypass in login log parameter

Description

Detects an attempt to exploit CVE-2026-64638, a cross-site scripting flaw that can run malicious script in victims' browsers in CVE-2026-64638 WordPress.

CVEs

References

• nvd.nist.gov →