<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/wp-content/plugins/xml-sitemap-feed/assets/sitemap-news.xsl?ver=5.7.7"?>
<!-- generated-on="2026-10-13T16:31:29+00:00" -->
<!-- generator="XML Sitemap & Google News for WordPress" -->
<!-- generator-url="https://status301.net/wordpress-plugins/xml-sitemap-feed/" -->
<!-- generator-version="5.7.7" -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" >
<url><loc>https://wpdeeply.com/divi-plus-up-to-2-4-0-unauthenticated-arbitrary-file-read-cve-2026-91136/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T13:43:24+00:00</news:publication_date><news:title>Divi Plus up to 2.4.0 &#8211; Unauthenticated Arbitrary File Read (CVE-2026-91136)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/ghostscript-9-21-10-07-1-wordpress-pdf-preview-rce-cve-2026-39919/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T13:43:22+00:00</news:publication_date><news:title>Ghostscript 9.21-10.07.1 &#8211; Unauthenticated RCE Risk via WordPress PDF Previews (CVE-2026-39919)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/extensions-for-cf7-3-4-5-file-upload-rce-cve-2026-94589/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T07:32:11+00:00</news:publication_date><news:title>Extensions For CF7 &lt;= 3.4.5 - Unauthenticated Arbitrary File Upload to RCE (CVE-2026-94589)</news:title></news:news></url>
<url><loc>https://wpdeeply.com/avada-builder-3-16-1-unauthenticated-action-invocation-cve-2026-97670/</loc><news:news><news:publication><news:name>WPDeeply</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T07:32:09+00:00</news:publication_date><news:title>Avada Builder &lt;= 3.16.1 - Unauthenticated Arbitrary WordPress Action Invocation (CVE-2026-97670)</news:title></news:news></url>
</urlset>
