WordPress: WordPress 7.1 Media Processing Race Enables Persistent PHP File Write and Author-to-RCE

A race condition vulnerability was discovered in WordPress 7.1 that allowed authenticated users with Author role to achieve persistent arbitrary PHP execution. The vulnerability involved exploiting media finalization, URL-media sideload, and image post-processing flows to generate persistent imag...