WordPress shipped its second security release in five days on September 22, and the flaw it closed was under attack before the day was out. Version 7.1.2 carries a single fix, described on the project’s version documentation as “an unauthenticated path traversal issue in page-template resolution leading to conditional remote code execution,” reported by Robert Ressl. … Continue reading The WordPress 7.1.2 Flaw Was Exploited in Hours. Theme and Host Decide the Damage.