Why “We Patched #WordPress Last Week” Is Not Enough: WordPress has urgently released v7.1.2 for a critical core #vulnerability: an unauthenticated attacker can make template resolution include a chosen local PHP file and in some conditions, achieve RCE:
👇
https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2026-09-22 18:48:25 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2026-09-22 18:48:25 UTCEvent JSON
{
"id": "d6a8ed27dc53a0698f40ca13722645e2199ca031099547e460d6114924cf5202",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1790102905,
"kind": 1,
"tags": [
[
"t",
"wordpress"
],
[
"proxy",
"https://infosec.exchange/@securestep9/117316183990143431",
"web"
],
[
"t",
"vulnerability"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/117316183990143431",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/117316183990143431",
"pink.momostr"
],
[
"-"
]
],
"content": "Why “We Patched #WordPress Last Week” Is Not Enough: WordPress has urgently released v7.1.2 for a critical core #vulnerability: an unauthenticated attacker can make template resolution include a chosen local PHP file and in some conditions, achieve RCE:\n👇\nhttps://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html",
"sig": "4233ccade1829848a681c66d67e39dfc8dded865ab7e202a992f8b1c0add88d1a91670053871062a0c8e68d0f83acd05504726cad21fcfdb393340715828fd78"
}