13:49
2026-09-22
dev.to
ai-safety
Click2Shell: One-Click Chain from Automatic WordPress Theme Installation to PHP Execution
Security researchers disclosed Click2Shell, a pre-authentication WordPress Core theme preview injection chain that escalates to remote code execution. An attacker lures an administrator to a crafted Uā¦