A pre-authentication remote code execution bug in WordPress Core has been disclosed, and exploitation is underway.

Archive Window: 7 Days Left

Worldwide

Who

Researchers

What

A pre-authentication remote code execution bug in WordPress Core has been disclosed, and exploitation is underway.

When

Mon, 20 Jul 2026 05:37:44 GMT · 18h 47m ago

Where

Worldwide ·

Why

A newly revealed bug makes millions of websites vulnerable.

The Frontline Impact

How this affects you

Millions of websites worldwide are likely vulnerable to this pre-authentication remote code execution bug. Exploitation is currently in progress.

1 event in this thread

No related history yet - this is the origin event.