Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites
Mon Sep 21 2026
Appsec
Patching
Vulnerability
Wordpress
gbhackers.com
A recently disclosed WordPress vulnerability, known as Click2Shell, could let attackers execute remote PHP code on vulnerable sites after convincing a logged-in administrator to click a specially crafted link. WordPress version 7.1.1, released on September 17, 2026, addresses this issue. Researchers at PWNAI reported that the flaw exploits WordPress’s theme-preview workflow to install a theme […]
The post Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.