WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders.

On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

The hacker sent by Anthropic to calm the government’s nerves about AI safety

The hacker sent by Anthropic to calm the government’s nerves about AI safety Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 06.09.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 94.154.46.250 — 2204 requests (recent log) 176.65.144.71 — 1050 requests (recent log) 89.167.35.212 — 868 requests (recent

Eight Myths on Software Engineering and GenAI

Eight Myths on Software Engineering and GenAI Source: Hacker News