{"ok":true,"trend":{"id":678215,"platform":"mastodon","region":"global","key":"click2shell: a wordpress theme-install flaw that turns one admin click into server code execution if your organisation r","title":"Click2Shell: A WordPress Theme-Install Flaw That Turns One Admin Click Into Server Code Execution If your organisation r","url":"https://infosec.exchange/@insomnisec/117368668064623992","first_seen":"2026-10-02T01:51:17.830655Z","last_seen":"2026-10-02T01:51:17.830655Z","last_rank":11,"peak_rank":11,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.78734375,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Security researchers have disclosed a WordPress vulnerability, dubbed Click2Shell, in which a single link opened by a site administrator can trigger malicious theme installation and full remote code execution on the server. Because WordPress powers a large share of websites, organisations are being urged to review admin practices and apply patches.","why":"The flaw's severity and WordPress's huge install base make it a pressing concern for site owners and administrators.","tone":"neutral","entities":["WordPress","Click2Shell","Insomnisec"],"summarized_at":"2026-10-02T01:53:08.246423Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":855},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"WordPress Flaw Turns One Admin Click Into Server Takeover","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-02T01:51:17.830655Z","rank":11,"volume":1}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@insomnisec/117368668064623992","author":"insomnisec@infosec.exchange","title":null,"snippet":"Click2Shell: A WordPress Theme-Install Flaw That Turns One Admin Click Into Server Code Execution If your organisation runs a website, there is a strong chance it runs on WordPress, and a flaw disclosed in September means a single link, opened by one of your own administrators,…","posted_at":"2026-10-02T01:15:48Z","likes":1}],"elsewhere":[],"window":"7d"}}