Reported by 3 outlets
WordPress Click2Shell RCE via Theme Preview Injection
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.27 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
The WordPress Click2Shell vulnerability enables remote code execution via theme preview injection. Learn how this flaw works and update to v
securityonline.info · 23d ago · September 21st, 2026
The WordPress Click2Shell vulnerability enables remote code execution via theme preview injection. Learn how this flaw works and update to v
via Mastodon https://securityonline.info/wordpress-click2shell-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social
-
update from pwn.ai
WordPress “Click2Shell” flaw can lead to RCE — patched in 7.1.1
pwn.ai · 23d ago · September 20th, 2026
A new WordPress flaw called Click2Shell was disclosed by pwn.ai . A crafted link opened by a logged-in admin can force WordPress to install and preview an attacker-chosen theme. Researchers showed it can be chained with a vulnerable theme to achieve server-side code execution . WordPress fixed the issue in 7.1.1 . submitted by /u/thechougala [link] [comments]
via reddit r/cybersecurity: New WordPress “Click2Shell” flaw can lead to RCE — patched in 7.1.1
-
update from malware.news
How Click2Shell Exploits WordPress Theme Installation for RCE
malware.news · 22d ago · September 21st, 2026
Key Takeaways Click2Shell lets an attacker trigger WordPress theme installation automatically once an administrator opens one crafted link. The Customizer request loads the installed theme's functions.php , exposing its insecure AJAX plugin installer for exploitation. The demonstrated chain targets Mobile Repair Zone 2.5.4 , where a vulnerable plugin installer runs attacker controlled PHP. The Picus Platform lets teams simulate Click2Shell to validate security control effectiveness. Click2Shell is a WordPress attack chain that can turn one click by a logged-in administrator into remote code execution (RCE). An attacker sends a crafted link that makes WordPress install a theme without the administrator clicking Install . A separate flaw in that theme then allows the attacker to run PHP on the server before anyone activates it.