Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

WordPress: Unauthenticated path traversal leading to conditional RCE

Hacker News · securityby vntok ()1
Read at github.com Hacker News · 25 points · 11 comments
AI summary · glm-5.3Summaries by Vani AI

WordPress advisory discloses an unauthenticated path traversal in core that can lead to conditional remote code execution.

A WordPress core security advisory (GHSA-7hp8-65ch-5whp) published on the wordpress-develop GitHub repository describes an unauthenticated path traversal vulnerability that can lead to conditional remote code execution. The advisory gained traction on Hacker News (25 points, 11 comments). The available text does not state a CVE id, affected versions, or observed exploitation.

Key facts
  • Unauthenticated path traversal in WordPress core enables conditional RCE
  • Disclosed via GitHub advisory GHSA-7hp8-65ch-5whp
  • WordPress is ubiquitous, so unpatched sites warrant prompt updating
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
wordpresspath-traversalrceadvisorycmswordpress-core
Organizations
WordPress

From the original article

Hacker News · security

By vntok · github.com

Read the full article at Hacker News · security

This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.