Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

This weekly threat roundup highlights several high-risk, actively exploited vulnerabilities (pre-auth WordPress RCE, SonicWall SMA zero-days, SharePoint deserialization) alongside a credential‑stealing botnet (NadMesh) targeting exposed AI service UIs, an OpenSSL DoS, and ongoing malware/ransomware activity; it emphasizes immediate patching, hardening exposed management interfaces, and prioritized remediation for WordPress, SonicWall, SharePoint, and OpenSSL.