XSS2Shell

CVE-2026-64638 — WordPress pre-auth XSS to RCE