7d ago

WordPress Click2Shell (CRITICAL, no CVE): Versions 4.7 – 7.1.0 let attackers force-install themes & run PHP code via theme preview, leading to RCE. Patch to 7.1.1 or latest backport ASAP. https:// rad

WordPress Click2Shell (CRITICAL, no CVE): Versions 4.7 – 7.1.0 let attackers force-install themes & run PHP code via theme preview, leading to RCE. Patch to 7.1.1 or latest backport ASAP. https:// radar.offseq.com/threat/wordpr ess-patches-click2shell-vulnerability-f550dfa1d978a913 # OffSeq # WordPress # RCE # Vulnerability

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

WordPress Click2Shell (CRITICAL, no CVE): Versions 4.7 – 7.1.0 let attackers force-install themes & run PHP code via theme preview, leading to RCE. Patch to 7.1.1 or latest backport ASAP. https:// rad

mastodon:infosec-exchangeother7d ago kagi ↗

WordPress Click2Shell (CRITICAL, no CVE): Versions 4.7 – 7.1.0 let attackers force-install themes & run PHP code via theme preview, leading to RCE. Patch to 7.1.1 or latest backport ASAP. https:// radar.offseq.com/threat/wordpr ess-patches-click2shell-vulnerability-f550dfa1d978a913 # OffSeq # WordPress # RCE # Vulnerability