wp2shell: Pre Authentication RCE in WordPress Core › Searchlight Cyber
slcyber.io
Critical issue discovered in WordPress Core affecting the majority of WordPress-built sites. The zero-day is a pre-authentication Remote Code Execution (RCE) that can be used by attackers to run malicious code to steal data or seize control without requiring login details...

7.0.2 got released on Friday. Exploits are already happening. People reporting hacks

  • SreudianFlip@sh.itjust.worksEnglish
    5·
    2 months ago

    Anyone who hosts websites can check the logs and see the bots hammering away at wp/admin primarily, even if you are not running any WordPress. Low hanging meat? Fresh fruit?