Search
Stories, the companies and people Loro tracks, and the primary records behind them — filings, donations, contracts and disclosures.
Primary record4
WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability actively exploited
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predi
WordPress Core: WordPress Core Remote File Inclusion Vulnerability actively exploited
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directorie
WordPress Core: WordPress Core SQL Injection Vulnerability actively exploited
WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain rem
WordPress Core: WordPress Core Interpretation Conflict Vulnerability actively exploited
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137. Required ac