jobusa755-a11y/CVE-2026-65640-

PoC

WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload

view exploit source poc_in_githubauthor jobusa755-a11ypublished 2026-08-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-65640US	—	1.94% (80th)	Exploit	2026-08-17
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.