The Hacker News September 22, 2026

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.

More like this

SpaceXAI backs Omarchy, the controversial Linux distro, with $1.5 million in compute

The Verge

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

The Hacker News

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

The Hacker News