Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Click2Shell: WordPress Flaw Enables RCE Chain

SOCRadarby ameer ()2
Read at socradar.io
AI summary · grok-4.7Summaries by Vani AI

SOCRadar describes Click2Shell, a WordPress Core flaw that can chain a tricked admin browser into RCE.

SOCRadar describes Click2Shell as a WordPress Core vulnerability that can manipulate a logged-in administrator's browser into installing and previewing a theme without explicit consent. That action is presented as part of a remote code execution chain. The excerpt does not name a CVE or say the flaw is being exploited.

Key facts
  • Click2Shell is described as a WordPress Core flaw
  • It manipulates a logged-in administrator's browser
  • The chain can install and preview a theme toward RCE
  • The excerpt cites no CVE and no active exploitation
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
wordpressclick2shellrcewordpress-corevulnerability
Products
WordPress

From the original article

Click2Shell: WordPress Flaw Enables RCE Chain Click2Shell is a vulnerability in WordPress Core that allows a logged-in administrator's browser to be manipulated into installing and previewing a theme without explicit con

SOCRadar

By ameer · socradar.io

Read the full article at SOCRadar

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.