vulnerability
Imported story
A Vulnerability in WordPress Could Allow for Remote Code Execution
Source: CIS Advisories · Published · Last checked 1 hour ago · 1 min read
Read original source ↗ (www.cisecurity.org)
Publisher excerpt From CIS Advisories
A vulnerability has been discovered in WordPress that could allow arbitrary code on the web server. WordPress is a free, open-source content management system (CMS) that allows you to build and manage websites without needing to write code. Successful exploitation allows an unauthenticated attacker to manipulate the page-template resolution logic to execute local PHP files outside the active theme directory, potentially leading to Remote Code Execution (RCE) under specific conditions.
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.