WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Home / Tech / WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

September 23, 2026 dirk 0 Comments 3 tags

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders.

On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

Source: The Hacker News

Explore More

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor

Attack Update: Top 5 Attack-IPs auf doode.info – 05.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 74.7.243.219 — 1377 requests (recent log) 89.167.35.212 — 788 requests (recent log) 216.244.66.232 — 252 requests (recent

AI boosted homework scores, then exam scores dropped: study

AI boosted homework scores, then exam scores dropped: study Source: Hacker News