Urgent.News

What's breaking now, across thousands of outlets.

Friday, 18 September 2026 Reading Room

Tech

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme from the official WordPress.org directory without anyone clicking Install. The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell. On its own the flaw only

thehackernews.com ·

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

Gauging Interest in the iPhone Duo

Max Roberts, after looking at the list of MKBHD’s all-time most popular videos, and noting that his Duo first-look is #3, and a Duo follow-up is already at #36: Apple enters the category and in a week…

  • Max Roberts' first-look video for the iPhone Duo is the third most popular on MKBHD's all-time list.
  • A follow-up video for the Duo is already in the 36th spot on the list.
  • The popularity of the iPhone Duo indicates potential interest in foldable phone technology.

·maxfrequency.net

More from Friday 18 September →