click2shell

markdown Click2Shell — WordPress Pre-Auth RCE Chain PoC...

click2shell-poc

Click2Shell — WordPress Pre-Auth RCE Chain PoC Python proof...

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme from the official WordPress.org directory without anyone clicking Install. The security firm pwn.ai, whos...