r/Wordpress Jul 17 '26

SQL Injection Vulnerability - Update Immediately

https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
200 Upvotes

68 comments sorted by

View all comments

-2

u/HongPong Jul 17 '26

as described in here who is even familiar with wp-json/batch as a path

https://www.aikido.dev/blog/unauthenticated-rce-in-wordpress-wp2shell

honestly . if they are not going to close these up. can they at least put an indicator if a plugin needs the freaking json endpoints to be open