Noticias Tech
Ciberseguridad
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server. WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed "Com
2026-09-221 min de lectura
The Hacker News
Resumen generado con IA · Fuente original
Temas
Ciberseguridad
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server. WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed "Comment2Shell," on September 17 in version 7.1.1 and told site owners to update right away. The
Newsletter12,500+ suscriptores
Recibe el mejor contenido tech cada mañana
Gratis · Sin spam · Cancela cuando quieras