v2026.07.27.02 — 2026-07-27

• fix(wordpress): switch CVE source from removed Wordfence v2 to wpvulnerability.net
• fix(agent): npm install with a selected Node version (runuser resets PATH)