WordPress Patches ‘Click2Shell’ Vulnerability
WordPress 7.1.1 patches Click2Shell, a theme-preview flaw that can lead to remote code execution.
1
Stories per day · 30 days
7 stories, newest first · one card per story
Stories tagged #click2shell
WordPress Click2Shell flaw lets hackers execute PHP on the server
Public PoC shows WordPress Click2Shell can run PHP if an administrator opens a crafted link.
1
Click2Shell: WordPress Flaw Enables RCE Chain
SOCRadar describes Click2Shell, a WordPress Core flaw that can chain a tricked admin browser into RCE.
Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites
WordPress 7.1.1 patches Click2Shell, which can force theme installs and enable PHP code execution.
2
Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link
Researchers disclosed Click2Shell, a WordPress exploit chain that turns a single malicious link clicked by an admin into remote code execution; fixed in WordPress 7.1.1.
4
Click2Shell: The RCE WordPress 7.1.1 Just Patched
WordPress 7.1.1 patches Click2Shell, a CSRF-to-selector-injection chain letting attackers gain remote code execution via crafted links clicked by admins.
3
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
WordPress 7.1.1 patches Click2Shell, a flaw letting crafted links force-install themes on admin visits, chainable to remote code execution; no exploitation observed.
3