New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
-
WordPress has released patches addressing a set of core vulnerabilities, one of which enables an attack dubbed Click2Shell. According to the security firm pwn.ai, whose researchers reported the issue, a specially crafted web link opened by a logged-in administrator can trigger the installation of a theme from the official WordPress.org directory without the admin ever clicking an Install button.
On its own, the flaw is limited in scope, but it can be chained with other weaknesses to achieve code execution, which is where the Click2Shell name comes from. The attack requires an authenticated administrator to open the malicious link, making social engineering or a compromised admin session a prerequisite.
Key points:
- WordPress core patches are now available and should be applied promptly.
- The vulnerability allows forced theme installation from the official directory via a crafted link.
- Exploitation requires a logged-in administrator to open the link.
- The issue can be chained to reach code execution.
- The flaw was reported by researchers at pwn.ai.
Administrators should prioritize updating to the latest WordPress release and review any unexpected theme installations on their sites.
Source: The Hacker News
Has your organization applied the latest WordPress core update, and are you auditing for unauthorized theme changes?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login