Investigating - A high-severity reflected XSS vulnerability, CVE-2026-64638, has been identified in the WordPress login interface. Exploitation requires a victim to visit a specially crafted URL and, under specific conditions, could potentially lead to PHP code execution.
Impacted versions
Impacted versions:
WordPress 4.7 – 7.0.2 (every release on every branch)
WordPress 4.6 and earlier — end of life, no patch available
Fixed versions:
WordPress 7.0.3
WordPress 6.9.6
WordPress 6.8.7
Equivalent minor releases on every remaining supported branch back to 4.7
Recommended Action
Customers are strongly encouraged to update WordPress core and ensure automatic security updates are enabled where appropriate. Since exploitation requires user interaction, customers should also remain vigilant against phishing attempts and avoid clicking suspicious or unsolicited links.
Customers with automatic security updates enabled should receive the applicable update automatically; however, we recommend verifying the currently running WordPress version.
There is currently no reported evidence of widespread exploitation in the wild. We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please contact our Support team.
Aug 08, 2026 - 09:24 EDT
Impacted versions
Impacted versions:
WordPress 4.7 – 7.0.2 (every release on every branch)
WordPress 4.6 and earlier — end of life, no patch available
Fixed versions:
WordPress 7.0.3
WordPress 6.9.6
WordPress 6.8.7
Equivalent minor releases on every remaining supported branch back to 4.7
Recommended Action
Customers are strongly encouraged to update WordPress core and ensure automatic security updates are enabled where appropriate. Since exploitation requires user interaction, customers should also remain vigilant against phishing attempts and avoid clicking suspicious or unsolicited links.
Customers with automatic security updates enabled should receive the applicable update automatically; however, we recommend verifying the currently running WordPress version.
There is currently no reported evidence of widespread exploitation in the wild. We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please contact our Support team.
Aug 08, 2026 - 09:24 EDT
API
Operational
DNS
Operational
Cloud Dedicated
Operational
Cloud VPS Hosting
Operational
CPanel
Operational
InterWorx
Operational
Plesk
Operational
Object Storage
Operational
VMware Cloud
Operational
VMware Private Cloud
Operational
Business Email
Operational
Load Balancers
Operational
Cloud Load Balancers
Operational
Shared Load Balancers - DC2
Operational
Shared Load Balancers - DC3
Operational
Shared Load Balancers - DC4
Operational
Shared Load Balancers - DC5
Operational
Network
Operational
LAN Network
Operational
PHX Network
Operational
AMS Network
Operational
Data Centers
Operational
DC2 - LAN
Operational
DC3 - LAN
Operational
DC4 - PHX
Operational
EU - AMS
Operational
Management Portal
Operational
Support Services
Operational
Chat
Operational
Case
Operational
Phone
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Scheduled Maintenance
Critical Network Infrastructure Upgrade – Capacity Expansion Aug 12, 2026 09:30-12:30 EDT
We are performing critical network infrastructure upgrades to significantly improve network stability and reliability. This work involves upgrading the DWDM (Dense Wavelength Division Multiplexing) system capacity from 200G to 400G between our data centers and the ATT network.
This maintenance is scheduled to begin Wednesday, August 12, at 9:30 am ET, and is expected to last for 3 hours.
While we typically strive to perform network maintenance outside of business hours, this one will take place inside business hours, due to the specific availability requirements of our third-party vendors.
To maintain operational continuity during this process, multiple layers of redundancy are in place to support these upgrades. While we do not anticipate any service outages, some users may experience brief latency in rare situations as traffic routes adjust. We appreciate your understanding as we complete these necessary performance enhancements.
Posted on Aug 07, 2026 - 12:37 EDT
This maintenance is scheduled to begin Wednesday, August 12, at 9:30 am ET, and is expected to last for 3 hours.
While we typically strive to perform network maintenance outside of business hours, this one will take place inside business hours, due to the specific availability requirements of our third-party vendors.
To maintain operational continuity during this process, multiple layers of redundancy are in place to support these upgrades. While we do not anticipate any service outages, some users may experience brief latency in rare situations as traffic routes adjust. We appreciate your understanding as we complete these necessary performance enhancements.
Posted on Aug 07, 2026 - 12:37 EDT