A default, unmodified WordPress (WP) website can be completely compromised with no login or plugin installation required. Attackers are already gaining remote code execution, and security teams are ...

Administrators are being urged to patch a critical pre-authentication RCE vulnerability in WordPress that threatens millions of websites and which can lead to a full takeover by attackers.