importantSYS.SOURCE: The Hacker News• 2026-09-22T11:33:14+05:30

WordPress Comment2Shell Vulnerability Exploits XSS to Achieve RCE via Admin Session

#wordpress #vulnerability #rce #xss #security

A newly disclosed WordPress vulnerability (CVE-2026-93485) allows anonymous users to execute remote code via crafted comments that exploit XSS to gain administrator-level access. The flaw was patched in WordPress 7.1.1, requiring immediate updates to prevent potential server compromise.

A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server.

WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed "Comment2Shell," on September 17 in version 7.1.1 and told site owners to update right away. The

Read original article

*** END OF TRANSMISSION ***

> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY