Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system. Adam Kues at Assetnote, Searchlight Cyber's attack surface management arm, found the flaw and reported
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
RM

ryan maybe

4h ago
0 0

Discussion

Get the discussion rolling

A single comment can start something great.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Inc Ransomware Exploits SonicWall SMA Zero-Days

When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.
DR

Dark Reading

8h ago
0
thehackernews.com
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver …

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply…
Nirano

Nirano

9h ago
0
schneier.com
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach

Lots of articles about this. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moder…
SS

Schneier on Security

10h ago
0
bleepingcomputer.com
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte …

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload o…
RM

ryan maybe

10h ago
0
bleepingcomputer.com
Abbott probes two cyber incidents amid extortion claims

Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its…
TA

taylor??

11h ago
0
bleepingcomputer.com
Ernst & Young discloses data breach after support system hack

Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. [. .. ]
Rosa Martinez

Rosa Martinez

14h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver …

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply…
Nirano

Nirano

9h ago
0
thehackernews.com
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to K…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its…
TN

The Hacker News

22h ago
0
thehackernews.com
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million…

Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July 2026, for the 2024 hack of T…
TN

The Hacker News

1d ago
0
thehackernews.com
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync…

A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goe…
TN

The Hacker News

1d ago
0
thehackernews.com
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Deve…

Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows sig…
TN

The Hacker News

1d ago
0
thehackernews.com
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critica…

Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed…
Noor Bakker

Noor Bakker

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest