Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: WordPress site administrators
Incident: Pre-authentication Remote Code Execution (RCE) vulnerability in WordPress Core.
Impact: Full system compromise and unauthorized code execution on the web server.
Attacker: Unidentified threat actors
Analysis: The flaw stems from a REST API batch-route confusion and SQL injection vulnerability introduced in version 6.9. Because it resides in the core installation, any site running the affected versions is vulnerable regardless of their plugin configuration. While patches are available, the massive scale of the WordPress ecosystem makes this a high-priority risk.
Recommendations: Immediately update WordPress to version 6.9.5, 7.0.2, or newer.; Manually verify the current version to ensure auto-updates were successfully applied.; As a temporary mitigation, use a WAF to block access to /wp-json/batch/v1 and rest_route=/batch/v1.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source