Critical WordPress Plugin Flaw and Microsoft Dynamics 365 Vulnerability

The Daily CVE Update · Jul 9, 2026 · 15m

Critical WordPress Plugin Flaw and Microsoft Dynamics 365 Vulnerability

Two critical vulnerabilities have been published in the last 24 hours, both requiring immediate attention from UK small businesses. CVE-2026-58480 affects Blocksy Companion Pro, a widely deployed WordPress plugin, scoring 9.8 on the CVSS severity scale. The flaw allows unauthenticated remote code execution through inadequate file upload validation, enabling attackers to upload and execute malicious PHP files by exploiting a substring matching error in the plugin’s validation logic. CVE-2026-47646 targets Microsoft…