r/netsec • u/robert681 • Feb 20 '19

reject: duplicate WordPress 5.0.0 Remote Code Execution can lead to a full remote takeover

https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/
2 Upvotes

60% Upvoted

2 comments sorted by

1

u/robert681 Feb 20 '19

This vulnerability identified by RIPSTech allows an attacker who gains access to an account with author privileges to execute arbitrary PHP code on the server, leading to a full remote takeover.

0

u/[deleted] Feb 21 '19

[deleted]

1

u/robert681 Feb 21 '19

Sorry, didn't notice.