WordPress app-password minting followed by REST page creation (CVE-2026-64638)

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•0•0•2

Detects potential abuse of WordPress application passwords by correlating an authorization mint request (authorize-application.php) from an administrator's browser with a subsequent REST API page creation request to the same destination server from a different source IP address within a short time window.