web-exploitation 2 XSS2Shell: How a WordPress Login Page XSS Chains Its Way to Remote Code Execution (CVE-2026-64638) Aug 12, 2026 TryHackMe Beach Bar Walkthrough: Boot2Root via YAML Deserialization Aug 1, 2026