Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. [...]
WordPress Core "wp2shell" RCE flaws get public exploits, patch now
Summary + source link. No paywalls, no tracking.