SecurityThe Hacker Newsabout 4 hours ago
WordPress Comment2Shell Flaw Fixed in 7.1.1
4 min read
WordPress patched CVE-2026-93485, dubbed Comment2Shell, on September 17 in version 7.1.1. The flaw let an anonymous commenter plant a script that ran when an administrator opened the page, enabling plugin upload and server code execution. No attacks are known. Affected versions span 4.7 through 7.1.
Level
Hype check
Tap to vote and see what everyone thinks.
