#php-type-juggling

CVE-2026-17532: nonce: true => Web Shell

Unauthenticated reflected XSS to 1-click RCE in Seraphinite Accelerator, a WordPress caching plugin on 50,000+ sites. The site that looked clean What would you do if I told you that just by opening y