Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…
Intelligence View
⚡ tsecurity.de Intelligence
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
6 Quellen
Amazon Kindle+: Bekannte Unlimited-Lese-Flatrate erhält neuen Namen
5 weitere Quellen
EEngadgetvor 1 Std.Amazon rebrands Kindle Unlimited to Kindle+ TThe Vergevor 1 Std.Amazon renames Kindle Unlimited to Kindle Plus and expands access to audiobooks Nnetzwelt.devor 4 Std.Amazon schafft Kindle Unlimited ab: Wechsel zu Kindle+ betrifft Millionen Bestandskunden ZZDNETvor 3 Std.Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks ZZDNETvor 3 Std.Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks
5 Quellen
CVE-2026-114128 | Withastro Astro up to 7.3.1 JSX/MDX Renderer cross site scripting (EUVD-2026-107411)
4 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-114127 | Withastro Astro up to 7.3.2 View Transition CSS Generator injection (EUVD-2026-107409) VVulDB Updatesvor 4 Std.CVE-2026-96388 | Tawk.to Plugin up to 3.0.3 cross-site request forgery (EUVD-2026-107817) VVulDB Updatesvor 4 Std.CVE-2026-63430 | rust-ammonia up to 3.3.1/4.0.1/4.1.2 cross site scripting (EUVD-2026-102241) VVulDB Updatesvor 3 Std.CVE-2026-115494 | KNIME Business Hub up to 1.18.x cross-site request forgery (EUVD-2026-108219)
5 Quellen
CVE-2025-38678 | Linux Kernel up to 6.16.1/6.17-rc1 netfilter privilege escalation (EUVD-2025-26497 / Nessus ID 261539)
4 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2025-38679 | Linux Kernel up to 6.16.1 event_seq_changed out-of-bounds (Nessus ID 261542 / WID-SEC-2025-1976) VVulDB Updatesvor 1 Std.CVE-2026-89777 | Linux Kernel up to 7.2.5 vfio_pci vfio_pci_config.c vfio_pci_config_rw_single use after free (Nessus ID 370472) TThe Hacker Newsvor 2 Std.Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes SSlashdotvor 3 Std.Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4278686/it-security-nachrichten/critical-wordpress-flaws-allow-attackers-to-execute-remote-code-without-authentication/