A critical vulnerability in WordPress allows anonymous visitors to inject hidden scripts through the comment section. When viewed by a logged-in administrator, this can escalate to remote code execution on the underlying server. WordPress has addressed the issue in version 7.1.1 and urges immediate patching.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →