SignalsMonitor LIVE INTELLIGENCE
SECURITYQUIET

25 days ago

WordPress Click2Shell flaw lets hackers execute PHP on the server

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 21 Sept 2026, 18:23 UTC. The headline in use is “WordPress Click2Shell flaw lets hackers execute PHP on the server”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. [...

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer