🚨 Click2Shell: Critical WordPress RCE chain A malicious link can trigger an authenticated WordPress admin’s browser to silently install a theme, load its functions.php, abuse an insecure AJAX handler, and reach remote code execution. The Core flaw is patched in WordPress 7.1.1, but vulnerable third-party themes can still complete the chain. Full technical breakdown + PoC analysis: https://thecybersecguru.com/news/click2shell-wordpress-vulnerability-rce/ #InfoSec #WordPress #CyberSecurity #RCE #AppSec