Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments
WordPress administrators are being urged to patch a high-severity core vulnerability that can turn an anonymous comment into server-side command execution. Tracked as CVE-2026-93485 and demonstrated by the Comment2Shell proof-of-concept, the flaw is an unauthenticated stored cross-site scripting issue in WordPress’s wpautop() formatting function. WordPress fixed the vulnerability in version 7.1.1 and advised site owners […] The post WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments appeared first on Cyber Security News.
WordPress administrators are being urged to patch a high-severity core vulnerability that can turn an anonymous comment into server-side command execution. Tracked as CVE-2026-93485 and demonstrated by the Comment2Shell proof-of-concept, the flaw is an unauthenticated stored cross-site scripting issue in WordPress’s wpautop() formatting function. WordPress fixed the vulnerability in version 7.1.1 and…
Excerpt shown under the publisher's RSS terms · 52 words · full text and figures are on the publisher's site
Related coverage
Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login
Cybersecurity News · Sep 15, 2026
Links #5: 2026/07
LessWrong · Jul 31, 2026
Problems of Proliferation
LessWrong · Sep 29, 2026
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
TechCrunch · Jul 20, 2026