> TritonInfoSec News
Home / Sep 23, 2026 / Story
0
#4 The Hacker News general September 22, 2026 at 18:03 UTC

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

By [email protected] (The Hacker News)

AI Summary

WordPress shipped version 7.1.2 on September 22 to fix a critical unauthenticated RCE flaw allowing attackers to load arbitrary PHP files outside theme directories. The patch covers all supported branches back to version 4.7, and on vulnerable server configurations the flaw can lead to full code execution without any account. Site administrators should update immediately given the breadth of affected installations.

Read full article → https://thehackernews.com/2026/09/wordpress-issues…

Relevance score: 88.0/100

# More from September 23

  1. 1
    ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach BleepingComputer
  2. 2
    EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts BleepingComputer
  3. 3
    Check Point warns of Management Server zero-day exploited in attacks BleepingComputer
  4. 5
    Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access The Hacker News
  5. 6
    New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory The Hacker News
  6. 7
    New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups The Hacker News
  7. 8
    Google Fined €403 Million Over GDPR Violations Tied to Location Data The Hacker News
  8. 9
    Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer SecurityWeek
  9. 10
    Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme SecurityWeek