Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites
WordPress 7.1.1 patches Click2Shell, which can force theme installs and enable PHP code execution.
62
Product
Mobile Repair Zone
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 18, 2026
- Last mentionedSep 21, 2026
Timeline
4 articles · newest firstClick2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link
Researchers disclosed Click2Shell, a WordPress exploit chain that turns a single malicious link clicked by an admin into remote code execution; fixed in WordPress 7.1.1.
65
Click2Shell: The RCE WordPress 7.1.1 Just Patched
WordPress 7.1.1 patches Click2Shell, a CSRF-to-selector-injection chain letting attackers gain remote code execution via crafted links clicked by admins.
75
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
WordPress 7.1.1 patches Click2Shell, a flaw letting crafted links force-install themes on admin visits, chainable to remote code execution; no exploitation observed.
70
Appears with
- WordPressvendor · 4
- pwn.aiorganization · 3
- WordPress 7.1.1product · 2
- WordPressorganization · 2
- pwn.aivendor · 1
- PWN AIorganization · 1
- WordPressproduct · 1
- WordPress Coreproduct · 1
- Patchstackvendor · 1
- CISAorganization · 1
- WordPress.orgorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.