<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/wp-content/plugins/xml-sitemap-feed/assets/sitemap-news.xsl?ver=5.7.7"?>
<!-- generated-on="2026-09-25T18:35:25+00:00" -->
<!-- generator="XML Sitemap & Google News for WordPress" -->
<!-- generator-url="https://status301.net/wordpress-plugins/xml-sitemap-feed/" -->
<!-- generator-version="5.7.7" -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" >
<url><loc>https://wpdeeply.com/s2member-260814-unauthenticated-remote-code-execution-cve-2026-19804/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-09-25T06:50:10+00:00</news:publication_date><news:title>s2Member ≤ 260814 &#8211; Unauthenticated Remote Code Execution</news:title></news:news></url>
<url><loc>https://wpdeeply.com/yop-poll-7-0-10-admin-account-takeover-cve-2026-85682/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-09-24T07:00:32+00:00</news:publication_date><news:title>YOP Poll &lt;= 7.0.10 - Administrator Account Takeover via postMessage Origin Validation (CVE-2026-85682)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/visual-composer-45-16-0-unauthenticated-local-file-inclusion-cve-2026-12227/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-09-24T07:00:30+00:00</news:publication_date><news:title>Visual Composer &lt;= 45.16.0 - Unauthenticated Local File Inclusion (CVE-2026-12227)</news:title></news:news></url>
</urlset>
