CVE-2026-39589 is a critical vulnerability (CVSS Score: 9.9) affecting the Webenvo theme, version <= 0.0.6. This vulnerability allows subscribers to upload arbitrary files, potentially leading to code execution and compromise of the affected system. The vulnerability was published on June 17, 2026, and immediately modified the same day. Users of the affected theme should take immediate action to mitigate [truncated]
CVE-2026-39517 is a MEDIUM severity DOM-Based XSS vulnerability in the Blog Filter plugin, affecting versions from n/a through <= 1.7.6. This vulnerability involves improper neutralization of input during web page generation, which can lead to potential DOM-Based XSS attacks. Users of Blog Filter plugin version 1.7.6 or earlier should prioritize patching this vulnerability to prevent potential attacks. Th [truncated]