On its own, the flaw is limited in scope, but it can be chained with other weaknesses to achieve code execution, which is where the Click2Shell name comes from. The attack requires an authenticated administrator to open the malicious link, making social engineering or a compromised admin session a prerequisite.

Key points:

• WordPress core patches are now available and should be applied promptly.
• The vulnerability allows forced theme installation from the official directory via a crafted link.
• Exploitation requires a logged-in administrator to open the link.
• The issue can be chained to reach code execution.
• The flaw was reported by researchers at pwn.ai.

Administrators should prioritize updating to the latest WordPress release and review any unexpected theme installations on their sites.

Source: The Hacker News

Has your organization applied the latest WordPress core update, and are you auditing for unauthorized theme changes?