WordPress: RCE flaw actively exploited, CISA warns
CISA warned US federal agencies that a recently patched high-severity WordPress vulnerability (remote code execution, RCE) is now being exploited in real attacks.
Checked in Shield: no
Who is affected
The CVE, affected versions and exploitation conditions are not stated in the available text. It is not yet disclosed whether the issue is in WordPress core or a separate component.
How to check
Check your current WordPress version in the admin dashboard (Dashboard, Updates) and consult the original CISA source and the KEV catalog once details are published.
How to fix
The flaw is described as recently patched. Install the latest updates for WordPress, plugins and themes. The exact fixed versions have not been named yet.
What Shield checks not checked
Checked in Shield: no. This is usually not visible from outside, or the check has not been added yet; we collect such cases and add checks in batches.
Good to know
The CVE, component and technical details are not disclosed yet. Source: BleepingComputer, citing CISA.
