WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Install Web Shells Without Login

WP2Shell combines two WordPress Core flaws to move from an unauthenticated request to server-side code execution. It can let an attacker create an administrator account and install a plugin-based web shell. Seqrite’s October 16 analysis lists affected releases, but does not establish widespread live exploitation. The report says the flaws were... Weiterlesen: WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Inst…