We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·17d ago·5 min read
wp2shell: Pre Authentication RCE in WordPress Core
✦ Why It Matters
Update your WordPress installation immediately to prevent potential exploitation of this critical vulnerability.
Key Takeaways
- Update WordPress to version 6.9.5 or 7.0.2 immediately.
- Implement temporary mitigation by blocking specific REST API endpoints.
- Use the provided plugin to require authentication for batch requests.
- Regularly check for security updates to maintain site integrity.
How It Works
The vulnerability allows anonymous users to execute arbitrary code on WordPress sites by exploiting the REST API without prior authentication. This is particularly dangerous as it can be done on default installations without any plugins.