WordPress POP Chain Flaw Exposes Over 800M+ Websites to Attack

A critical remote code execution vulnerability has been patched as part of the WordPress 6.4.2 version. This vulnerability exists in the POP chain introduced in version 6.4, which can be combined with a separate Object Injection, resulting in the execution of arbitrary PHP code on the website. There was no CVE assigned for this vulnerability. […]

The post WordPress POP Chain Flaw Exposes Over 800M+ Websites to Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security …

attack code code execution critical cyber security flaw injection object php pop remote code remote code execution version vulnerability website websites word press wordpress