TLDR Tech / InfoSec
WP2Shell: Pre-Authentication RCE in WordPress Core
Searchlight Cyber disclosed a pre-authentication RCE in WordPress Core exploitable by an anonymous attacker on a stock install with no plugins, affecting roughly 500 million sites on versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1. The researchers withheld technical details to give defenders time to patch, but released wp2shell[.]com as a public checker tool. Admins should update to WordPress 7.0.2 (or 6.9.5 on the 6.9 branch) immediately, or as a temporary measure, block anonymous access to /wp-json/batch/v1 and ?rest_route=/batch/v1 at the WAF level.
Read the full story