Thread

1. tptacek · 1790096527 · focus · HN ↗

   These CVSS scores don't mean anything and it would be better for everyone if they stopped showing up in headlines. This is a somewhat situational Wordpress RCE that impacts only a couple themes.

   1. paulez · 1790097194 · focus · HN ↗

      This score specifically means that given some specific conditions, anyone can execute code over the network on a vulnerable WordPress setup. Is this not true?

      1. bombcar · 1790098808 · focus · HN ↗

         My assumption is that any Wordpress setup whatsoever allows anyone to execute code remotely.

         1. 6c696e7578 · 1790100030 · focus · HN ↗

            Indeed, it's a foothold into a network.

Unofficial Hacker News client; not affiliated with Y Combinator.