<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/wp-content/plugins/xml-sitemap-feed/assets/sitemap-news.xsl?ver=5.7.7"?>
<!-- generated-on="2026-11-06T17:21:27+00:00" -->
<!-- generator="XML Sitemap & Google News for WordPress" -->
<!-- generator-url="https://status301.net/wordpress-plugins/xml-sitemap-feed/" -->
<!-- generator-version="5.7.7" -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" >
<url><loc>https://wpdeeply.com/buddyforms-admin-privilege-escalation-cve-2026-107622/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-11-06T11:50:36+00:00</news:publication_date><news:title>BuddyForms through 2.10.5 &#8211; Unauthenticated Administrator Privilege Escalation (CVE-2026-107622)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/wp-libre-form-rce-cve-2026-118423/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-11-06T11:50:34+00:00</news:publication_date><news:title>WP Libre Form through 1.5.0.1 &#8211; Actively Exploited Unauthenticated RCE (CVE-2026-118423)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/ultra-addons-contact-form-7-file-deletion-cve-2026-102435/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-11-05T08:45:27+00:00</news:publication_date><news:title>Ultra Addons for Contact Form 7 through 3.5.54 &#8211; Actively Exploited File Deletion to RCE (CVE-2026-102435)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/acf-extended-pro-rce-cve-2026-120534/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-11-05T08:45:25+00:00</news:publication_date><news:title>ACF Extended PRO through 0.9.2.6 &#8211; Actively Exploited Unauthenticated RCE (CVE-2026-120534)</news:title></news:news></url>
</urlset>
