Precursor Intelligence
Latest cyber threat intelligence, breaches and exploitation
1 matching story
Fidelis Security has disclosed the wp2shell attack chain, a two-CVE exploit that lets unauthenticated attackers achieve remote code execution on WordPress Core via the REST API batch endpoint and a WP_Query SQL injection in the author__not_in parameter.
