Critical
CVE-2026-65640
WordPress RCE Vulnerability in Imagick and Ghostscript
Vendor / product: WordPress, Imagick, Ghostscript
Public PoC: Yes
First tracked by RiskWire: 2026-08-12
Sources & citations (3)
- WordPress RCE Vulnerability Lets Authenticated Authors Execute Remote Code gbhackers.com · 2026-08-13
- Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File cybersecuritynews.com · 2026-08-13
- When a PNG Isn't a PNG: WordPress Patches an Author-Level Imagick RCE patchstack.com · 2026-08-12
References
See CVE-2026-65640 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →