<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url><loc>https://www.threatwire.tech/threats/drupal-commerce-core-flaw-used-to-place-fraudulent-orders-update-to-3-3-13-and-audit-orders</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-30T18:20:00.000Z</news:publication_date><news:title>Drupal Commerce Core flaw used to place fraudulent orders: update to 3.3.13 and audit orders</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/wordpress-7-1-4-fixes-an-unauthenticated-rce-race-during-core-updates</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-30T14:45:00.000Z</news:publication_date><news:title>WordPress 7.1.4 Fixes an Unauthenticated RCE Race During Core Updates</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/cisa-adds-node2shell-cve-2026-111497-to-kev-federal-deadline-nov-10</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-30T10:20:00.000Z</news:publication_date><news:title>CISA adds Node2Shell CVE-2026-111497 to KEV; federal deadline is Nov 10</news:title></news:news></url>
</urlset>
