Reposted by Nospheratt 🏳️🌈
Hey folks. If you've got a WordPress site, you need to check what version you're on.
There's a critical vulnerability for versions 6.9.0 to 7.0.1.
Update immediately. Like put your phone down now & do it. Not tomorrow.
Complete compromise & remote code execution are possible w a simple script
businessinsights.bitdefender.com
Technical Advisory: wp2shell — Unauthenticated Remote Code Execution and Full Site Takeover in WordPress Core
Threat actors are actively exploiting two vulnerabilities in WordPress Core. The vulnerabilities carry a combined CVSS score of 9.8 out of 10.
