security Source: BleepingComputer

📅 22 September 2026 at 12:30 AM UTC

WordPress Click2Shell flaw lets hackers execute PHP on the server

Verified Primary Feed Ingestion

↗ Open Source Publication

⚡ Executive Takeaways & Intelligence Summary

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. [...]

Publication Reference: https://www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/

← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer

Hackers pull off $133 million French bank heist via service provider

BleepingComputer

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

The Hacker News

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub