New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Élevé · The Hacker News ·
WordPress
Ce qui s'est passé
WordPress patched core flaws; a crafted link opened by a logged-in admin can silently install a WordPress.org theme, called Click2Shell, and may chain to code execution. Affected: WordPress sites/admins.
À faire maintenant
Patch WordPress core immediately to the latest release; verify version. Enforce MFA, limit admin accounts, review/remove unknown themes, monitor logs for theme installs. Don't open untrusted links while logged in. If delayed, restrict admin access/WAF. Verify with vendor advisory.
Source originale
Analyse assistée par IA, sources citées. Vérifiez auprès de l'avis du fournisseur avant d'agir.