New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code - The Hacker News

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress s…