WordPress Click2Shell CSRF Flaw Enables Remote PHP Code Execution

A cross-site request forgery (CSRF) vulnerability dubbed Click2Shell affecting WordPress Core has been disclosed alongside technical details and…

Patch WordPress immediately if running an affected version; this is a critical priority given public exploit availability. Review access logs for suspicious CSRF attempts targeting administrative functions, as active exploitation is likely imminent.