WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable ...
WordPress 7.1.1 fixes Click2Shell, which can force theme installs from crafted links and was chained with a theme flaw for code execution.