#classicpress
-
Critical WordPress RCE flaw: update without delay
A critical WordPress vulnerability can, under certain limited conditions, let an unauthenticated attacker run arbitrary code. Fixes have shipped for the current branch and been backported as far as version 4.7.