Patchstack link - https://patchstack.com/articles/unauthenticated-php-object-injection-to-remote-code-execution-on-givewp/

The announcement post - https://wordpress.org/news/2026/08/browser-extension/

Here is the X link - https://x.com/SybreWaaijer/status/2086528919394480389