Click2Shell Chain Turns One Malicious Link Into WordPress Server Takeover

19 September 2026  |  dark6  |  Vulnerability

WordPress has fixed a theme-preview weakness that can silently install an attacker-selected theme when an administrator opens a crafted link. Paired with unsafe pre-activation code in a theme,...

>> read more