WordPress Forces Automatic Updates to Patch wp2shell, a Pre-Authentication RCE Chain in Core, as Public Exploits Circulate
WordPress shipped 7.0.2 and 6.9.5 on July 17 and enabled forced auto-updates to fix wp2shell, a two-CVE chain allowing unauthenticated remote code execution in core, as public proof-of-concept exploits circulate.
4 min read5 sources