Liquid Web logo

Liquid Web

Hosting
Resolving…
Description
Liquid Web is a managed hosting provider; Nexcess (WordPress, WooCommerce, Magento) runs under its brand. Reverse DNS under nexcess.net and nxcli.net (e.g. cloudhost-*.nxcli.net) indicates Liquid Web / Nexcess cloud hosting.
Active Incidents
Last refresh: 2026-08-21 09:58 UTC (51m ago)

Security Advisory: WordPress Security Update for CVE-2026-65640

Investigating

A security vulnerability, CVE-2026-65640, has been identified in WordPress that could allow an authenticated Author-level or higher user to achieve remote code execution through a malicious file upload on sites using Imagick and Ghostscript. The vulnerability has been addressed through updates across supported WordPress branches. Patched Versions: Customers should update to the following patche...

Incident
Location:
Started: 2026-08-12 15:44 UTC (8d ago)
Updated: 2026-08-12 15:44 UTC (8d ago)
Resolved: N/A

Security Advisory: WordPress XSS2Shell Vulnerability (CVE-2026-64638)

Investigating

A high-severity reflected XSS vulnerability, CVE-2026-64638, has been identified in the WordPress login interface. Exploitation requires a victim to visit a specially crafted URL and, under specific conditions, could potentially lead to PHP code execution. Impacted versions Impacted versions: WordPress 4.7 – 7.0.2 (every release on every branch) WordPress 4.6 and earlier — end of life, no patch...

Incident
Location:
Started: 2026-08-08 13:24 UTC (12d ago)
Updated: 2026-08-08 13:24 UTC (12d ago)
Resolved: N/A