PatchSiren

A WP Life CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL A WP Life CVE published 2026-06-17

CVE-2026-39589

CVE-2026-39589 is a critical vulnerability (CVSS Score: 9.9) affecting the Webenvo theme, version <= 0.0.6. This vulnerability allows subscribers to upload arbitrary files, potentially leading to code execution and compromise of the affected system. The vulnerability was published on June 17, 2026, and immediately modified the same day. Users of the affected theme should take immediate action to mitigate [truncated]

MEDIUM A WP Life CVE published 2026-04-08

CVE-2026-39517

CVE-2026-39517 is a MEDIUM severity DOM-Based XSS vulnerability in the Blog Filter plugin, affecting versions from n/a through <= 1.7.6. This vulnerability involves improper neutralization of input during web page generation, which can lead to potential DOM-Based XSS attacks. Users of Blog Filter plugin version 1.7.6 or earlier should prioritize patching this vulnerability to prevent potential attacks. Th [truncated]