~/article/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server-d17ab4

medium2026-09-21 18:23 UTCSource: BleepingComputer

WordPress Click2Shell flaw lets hackers execute PHP on the server

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net