WordPress Vulnerability Allows Unauthorized Theme Installation on Administrators' Sites

WordPress released security patches addressing a core vulnerability that permits attackers to install themes from the official directory using a crafted…

WordPress administrators must apply security patches immediately. Audit recently installed themes and review administrator account permissions. Implement additional controls such as restricting theme installation to trusted sources only, and consider disabling remote theme installation if not operationally critical.