WordPress Click2Shell flaw lets hackers execute PHP on the server

Cybersecurity brief from BleepingComputer.

From the source

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. […]

Why it is on APerez.net

This belongs in the security stream because it can affect how systems are defended, operated, patched, monitored, or trusted. The source link below has the complete reporting and technical details.

This APerez.net Wire Brief is an automatically created digest from an RSS item. It does not republish the full source article.