Top 10 Security Stories: WordPress XSS Flaw, PHP Vulnerabilities, and VMware ESX Issues Lead Weekly Roundup

Security NEXT has published its weekly ranking of the most viewed articles for the period from August 2 to August 8, 2026. The list highlights critical vulnerabilities affecting widely used platforms including WordPress, PHP, pgAdmin 4, VMware ESX, and Chrome. Several entries focus on newly released security updates and ongoing exploitation warnings issued by US authorities. The ranking also includes real-world incidents such as credit card skimming by employees and data leaks caused by phishing attacks. This weekly overview reflects the topics that drew the highest attention from the Japanese cybersecurity community during the specified week.

Security NEXTTranslated from Japanese

Read at source

Security NEXT has released its weekly ranking of the ten most-read articles published between August 2 and August 8, 2026. The list reflects reader interest in newly disclosed vulnerabilities and security incidents affecting popular software platforms and enterprise systems.

The top story reported an XSS vulnerability in the WordPress login screen, with a patched version now available. Second place went to multiple vulnerabilities in PHP that prompted a security release from the project maintainers.

Third on the list was a serious flaw in pgAdmin 4, which also exposed shortcomings in a previous fix. The fourth article advised organizations to prepare for the summer holiday period and pay special attention to the Patch Tuesday scheduled during the Obon week.

Fifth place covered critical vulnerabilities in VMware ESX and VMware vCenter, accompanied by the release of official patches. The sixth article described an incident in which an employee at a samgyeopsal restaurant skimmed customer credit card data.

Seventh was a warning from US authorities regarding active exploitation of three vulnerabilities affecting Langflow, Tomcat, and another product. Eighth place reported security updates for Chrome that addressed six critical vulnerabilities.

Ninth on the list detailed a serious flaw in the backup management product Veeam ONE. The tenth article reported a data leak at Kodansha after an employee fell victim to a phishing attack, resulting in the exposure of contact information.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Vulnerabilities & Exploits

Telegram for Android Patches Voice Call Vulnerability Enabling Code Execution
Yandex Patches Millions of Stations After eMudhra Certificate Keys Compromised
Cisco ASA and FTD Face DoS Vulnerability in SSL VPN Already Exploited in the Wild