Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

WordPress Click2Shell Flaw Enables Code Execution Through Themes

Part of the Click2Shell story · since 18 Sep

Quiet for 6 weekslast report 22 Sep4 articles4 outlets
18 Sep · The Hacker News first13 Oct21 OctNowThis article1st of 4
  • Fri 18 Sep, 18:01 UTC. The Hacker News, first report. WordPress Click2Shell Flaw Enables Code Execution Through Themes. This article, 1st of 4.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline, its first report on the story. WordPress 7.1.1 Fixes Click2Shell Chain Enabling Remote Code Execution.
  • Mon 21 Sep, 15:01 UTC. SOCRadar, its first report on the story. WordPress Click2Shell Flaw Can Chain Into Remote Code Execution.
  • Tue 22 Sep, 10:36 UTC. SecurityWeek, its first report on the story. WordPress Fixes Click2Shell Bug Enabling Theme Based RCE Attacks.

A newly identified vulnerability in WordPress, termed 'Click2Shell', necessitates theme installations that could lead to code execution. The flaw poses a significant security risk, demanding immediate attention from website administrators. The article discusses the implications of this vulnerability, emphasizing the need for users to update their WordPress installations and follow security best practices. It highlights the importance of proactive measures in safeguarding against such flaws to prevent potential exploitation.

How the story developed

All 4 articles
Quiet for 6 weekslast report 22 Sep4 articles4 outlets

4 articles from 4 outlets since 18 Sep. Quiet since 22 Sep. This was the first report.

Now18 Sep202122First reportThe Hacker News · 18 Sep, 18:01Picked up againafter 2 days quiet
  • Fri 18 Sep, 18:01 UTC. The Hacker News, first report. WordPress Click2Shell Flaw Enables Code Execution Through Themes. This article, 1st of 4.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline, its first report on the story. WordPress 7.1.1 Fixes Click2Shell Chain Enabling Remote Code Execution.
  • Mon 21 Sep, 15:01 UTC. SOCRadar, its first report on the story. WordPress Click2Shell Flaw Can Chain Into Remote Code Execution.
  • Tue 22 Sep, 10:36 UTC. SecurityWeek, its first report on the story. WordPress Fixes Click2Shell Bug Enabling Theme Based RCE Attacks.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 4 articles as a list
  1. Fri 18 SepDay 01
    1. WordPress Click2Shell Flaw Enables Code Execution Through Themes18:01 · The Hacker News · First report · This article, 1st of 4

  2. Quiet for 2 days

    Mon 21 SepDay 32
    1. WordPress 7.1.1 Fixes Click2Shell Chain Enabling Remote Code Execution02:59 · SecurityOnline · Picked up again
    2. WordPress Click2Shell Flaw Can Chain Into Remote Code Execution15:01 · SOCRadar
  3. Tue 22 SepDay 41
    1. WordPress Fixes Click2Shell Bug Enabling Theme Based RCE Attacks10:36 · SecurityWeek

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in