SecurityHacker Newsabout 3 hours ago
WordPress Fixes Critical 9.2 RCE Vulnerability
5 min read
WordPress 7.1.2 fixes a 9.2 severity flaw present since 2016, backported to version 4.7. Unauthenticated attackers can include a local.php file via get_page_template, leading to remote code execution if themes like Twenty Twelve, Twenty Fourteen, Neve, Hestia or Sydney have a page- directory and pearcmd.php is readable.
Level
Hype check
Tap to vote and see what everyone thinks.
