WordPress 7.1.1 reportedly fixes Click2Shell as exploit details go public
SecurityUnverifiedUpdated:
Technical details and a proof of concept for WordPress Core’s Click2Shell flaw have reportedly been published. The issue was fixed in WordPress 7.1.1, and exploitation requires a logged-in administrator to open a crafted link.
A crafted link must be opened by a logged-in administrator
BleepingComputer reports that Click2Shell is a cross-site request forgery (CSRF) flaw in WordPress Core. The reported attack chain can cause a vulnerable theme to be installed and its PHP code to run on the server when a logged-in administrator visits a crafted URL. The report says WordPress fixed the issue in version 7.1.1.
According to the report, the underlying flaw affected WordPress Core 7.1.0 and earlier, before the reported release of version 7.1.1.
The report says WordPress 7.1.1 now fixes the Core issue, while technical details and a proof-of-concept exploit for Click2Shell are public.
The report describes both an available fix and a public proof of concept. The attacker reportedly needs no WordPress account or administrator privileges, but a logged-in administrator must open the crafted link.
Sources
- BleepingComputerWordPress Click2Shell flaw lets hackers execute PHP on the serverRead source →