WordPress 7.1.1 fixes Click2Shell, which can force theme installs from crafted links and was chained with a theme flaw for code execution.
Critical vulnerabilities in The Events Calendar plugin for WordPress expose sites to unauthenticated remote code execution attacks. Learn how to protect your site now.