CVE-2026-63030 is a pre-authentication remote code execution vulnerability in WordPress Core affecting versions 6.9.0 through 7.0.1. A single anonymous POST to the REST API batch endpoint reaches a SQL injection that leads to direct access to the WordPress and can be escalated to a pre-auth RCE.

FullHunt launches Agentic AI capabilities for Attack Surface Mapping, Internet-Wide Assets Discovery, and Vulnerability Management to enable security teams to build Agentic AI workflows for securing external attack surfaces.

FullHunt is rolling out the complete 0day.today archive, featuring 39,408 exploits and nearly three decades of vulnerability research.

FullHunt released the OEM Intelligence API to enable seamless integration of attack surface intelligence into security platforms.