Thehackernews iconThehackernewsSep 18, 2026

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell.

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

Share this story

Send the public story page.

Useful takeaways from this story.

The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app