WordPress releases emergency update for critical ‘wp2shell’ RCE flaw

The WordPress project has released emergency security updates to fix a critical vulnerability chain dubbed wp2shell, that can allow unauthenticated attackers to achieve remote code execution (RCE) on vulnerable websites. The flaws affect WordPress 6.9 through 7.0.1 and have already prompted warnings that proof-of-concept (PoC) exploits are circulating and early signs of real-world exploitation have …

The post .