As cited
Copy frozen at (site build).
vulnerabilities
WordPress Click2Shell flaw lets hackers execute PHP on the server
A cross-site request forgery (CSRF) vulnerability called Click2Shell in WordPress Core has been disclosed with public technical details and proof-of-concept code available. The flaw enables attackers to execute PHP commands on affected servers.
Why it matters: WordPress administrators and site operators must patch immediately, as the public exploit details mean active attacks are likely; this affects any WordPress Core installation without the fix applied.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
WordPress Click2Shell flaw lets hackers execute PHP on the server
A cross-site request forgery (CSRF) vulnerability called Click2Shell in WordPress Core has been disclosed with public technical details and proof-of-concept code available. The flaw enables attackers to execute PHP commands on affected servers.
Why it matters: WordPress administrators and site operators must patch immediately, as the public exploit details mean active attacks are likely; this affects any WordPress Core installation without the fix applied.
- Source published
- First seen by Cybersecurity Tracker