https://wpdeeply.com/doctreat-1-7-0-file-upload-privilege-escalation-cve-2026-39770-39773/WPDeeplyen2026-10-10T09:32:01+00:00Doctreat <= 1.7.0 and Doctreat Core <= 1.7.0 - Unauthenticated File Upload and Privilege Escalation https://wpdeeply.com/bricksforge-3-1-8-9-actively-exploited-file-upload-rce-cve-2026-85097/WPDeeplyen2026-10-09T09:59:04+00:00Bricksforge ≤ 3.1.8.9 – Actively Exploited Unauthenticated File Upload to RCE https://wpdeeply.com/kirki-6-3-1-unauthenticated-stored-xss-cve-2026-102173/WPDeeplyen2026-10-08T11:58:05+00:00Kirki ≤ 6.3.1 – Unauthenticated Stored XSS via Registration Metadata