URL has been copied successfully!
WordPress Click2Shell flaw lets hackers execute PHP on the server
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

WordPress Click2Shell flaw lets hackers execute PHP on the server


Tags: , , , ,

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed ‘Click2Shell’ that affects the platform’s Core component.

First seen on bleepingcomputer.com

Jump to article: www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. CVE-2025-5947: WordPress Plugin flaw lets hackers access Admin accounts
  2. Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flaws
  3. Hackers exploit critical auth bypass flaw in JobMonster WordPress theme
  4. Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites