WordPress Patches 'Click2Shell' Theme Install Vulnerability

A WordPress vulnerability dubbed “Click2Shell” let attackers automatically install and preview themes, which could lead to remote code execution.

WordPress has patched the bug. Site owners should update to the latest core version to close the gap.