WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
- Posted on September 22, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
WordPress fixed a comment flaw that could lead to server code execution if a logged-in administrator opened the page.