TechNews

Critical WordPress RCE vulnerability announced

T1Covered by 1 source · first reported by LWN.net at

A critical vulnerability has been discovered in WordPress's get_page_template() function for page-template resolution that could allow remote-code execution (RCE) by an unauthenticated attacker, in some limited circumstances. The project has provided an update for the most recent branch of…

devsecurity

Sources