WordPress has patched a security flaw dubbed ‘Click2Shell’, allowing a crafted web link to trick a logged-in administrator into installing a theme from the official directory without manual confirmation. When chained with other issues, this can escalate to Remote Code Execution. Administrators should apply the latest patches immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →