<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url>
    <loc>https://0daynews.com/articles/2026-10-12-everest-backup-wordpress-rce-cve-2026-39802/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T08:00:00.000Z</news:publication_date>
      <news:title>Everest Backup Plugin Has CVSS 8.1 RCE Bug</news:title>
      <news:keywords>wordpress, rce, backup, plugin, unauthenticated, cve-2026-39802, everest-backup</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-12-everest-backup-wordpress-rce-cve-2026-39802/cover.jpg</image:loc>
      <image:title>Everest Backup Plugin Has CVSS 8.1 RCE Bug</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-12-booster-woocommerce-php-object-injection-cve-2026-42718/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T06:00:00.000Z</news:publication_date>
      <news:title>Booster for WooCommerce Has CVSS 9.8 Object Injection</news:title>
      <news:keywords>WooCommerce, WordPress, CVE-2026-42718, PHP Object Injection, deserialization, unauthenticated</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-12-booster-woocommerce-php-object-injection-cve-2026-42718/cover.jpg</image:loc>
      <image:title>Booster for WooCommerce Has CVSS 9.8 Object Injection</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-12-sitevault-wordpress-rce-cve-2026-42696/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T04:00:00.000Z</news:publication_date>
      <news:title>SiteVault WordPress Plugin Has CVSS 10 RCE Bug</news:title>
      <news:keywords>CVE-2026-42696, RCE, WordPress, SiteVault, backup plugin, unauthenticated, remote code execution</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-12-sitevault-wordpress-rce-cve-2026-42696/cover.jpg</image:loc>
      <image:title>SiteVault WordPress Plugin Has CVSS 10 RCE Bug</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-11-industrial-insider-extortion-bitcoin-prison/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T14:00:00.000Z</news:publication_date>
      <news:title>Industrial Engineer Jailed for 20-Bitcoin Extortion</news:title>
      <news:keywords>insider threat, extortion, industrial, ics-ot, privileged access, bitcoin</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-11-industrial-insider-extortion-bitcoin-prison/cover.jpg</image:loc>
      <image:title>Industrial Engineer Jailed for 20-Bitcoin Extortion</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-11-openapi-typescript-codegen-cve-2026-108551-code-injection/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T12:00:00.000Z</news:publication_date>
      <news:title>CVSS 9.8 Code Injection in openapi-typescript-codegen</news:title>
      <news:keywords>openapi, typescript, code-injection, supply-chain, npm, developer-security, CVE-2026-108551</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-11-openapi-typescript-codegen-cve-2026-108551-code-injection/cover.jpg</image:loc>
      <image:title>CVSS 9.8 Code Injection in openapi-typescript-codegen</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-11-fusionpbx-caller-id-os-command-injection/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T10:00:00.000Z</news:publication_date>
      <news:title>FusionPBX Caller ID Bug Lets Attackers Run OS Commands</news:title>
      <news:keywords>FusionPBX, VoIP, command injection, CVE-2026-108161, unauthenticated RCE, PBX security</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-11-fusionpbx-caller-id-os-command-injection/cover.jpg</image:loc>
      <image:title>FusionPBX Caller ID Bug Lets Attackers Run OS Commands</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-11-contao-cms-four-cve-critical-xss-patch/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T08:00:00.000Z</news:publication_date>
      <news:title>Contao Patches Critical XSS in Four-CVE Update</news:title>
      <news:keywords>Contao, CMS, CVE-2026-107845, XSS, path traversal, patch, open source</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-11-contao-cms-four-cve-critical-xss-patch/cover.jpg</image:loc>
      <image:title>Contao Patches Critical XSS in Four-CVE Update</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-11-woocommerce-three-critical-plugin-cves/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T06:00:00.000Z</news:publication_date>
      <news:title>Three Critical WooCommerce Plugins Need Patching</news:title>
      <news:keywords>WooCommerce, WordPress, CVE-2026-103889, CVE-2026-104803, CVE-2026-104801, authentication bypass, remote code execution</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-11-woocommerce-three-critical-plugin-cves/cover.jpg</image:loc>
      <image:title>Three Critical WooCommerce Plugins Need Patching</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://0daynews.com/articles/2026-10-10-fbi-arrests-shinyhunters-suspect-agency-breach/</loc>
    <news:news>
      <news:publication>
        <news:name>0dayNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-10T12:00:00.000Z</news:publication_date>
      <news:title>FBI Arrests ShinyHunters Suspect in FBI Breach Case</news:title>
      <news:keywords>ShinyHunters, FBI, cybercrime, arrest, ransomware, extortion, breach</news:keywords>
    </news:news>
    <image:image>
      <image:loc>https://0daynews.com/articles/2026-10-10-fbi-arrests-shinyhunters-suspect-agency-breach/cover.jpg</image:loc>
      <image:title>FBI Arrests ShinyHunters Suspect in FBI Breach Case</image:title>
    </image:image>
  </url>
</urlset>