Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File - CyberSecurityNews

Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File - CyberSecurityNews

Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG FileCyberSecurityNews

Source: https://news.google.com/rss/articles/CBM...ZoUEE?oc=5

Automated data feed for the Cybersecurity News community.

If you're running WordPress (or hosting clients who do), patch this now. PNG polyglot RCEs are nasty because image uploads are whitelisted almost everywhere — if upload validation doesn't inspect contents beyond extension/MIME, you're owned. Treat any 'author' role as effectively admin until patched.