Conversation

• L Latest Newsroom Latest Newsroom remote Sep 22, 2026, 6:03 AM You are here

  WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

  WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

  

  A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the si ... Read more

  Published Date: Sep 22, 2026 (1 day, 9 hours ago)

  Vulnerabilities has been mentioned in this article.

  CVE-2026-93485
  source