posted in Selfhosted

sanitation@sanitation@lemmy.today
edited

PSA WordPress Core had Critical Vulnerability. Patch released on Friday. Immediately update

7.0.2 got released on Friday. Exploits are already happening. People reporting hacks

slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core
Searchlight Cyberwp2shell: Pre Authentication RCE in WordPress Core › Searchlight CyberCritical issue discovered in WordPress Core affecting the majority of WordPress-built sites. The zero-day is a pre-authentication Remote Code Execution (RCE) that can be used by attackers to run malicious code to steal data or seize control without requiring login details...