https://curasec.metacog.co.kr/tags/xss-to-rce/Recent content in Xss-to-Rce on CuraSecHugoen-usTue, 22 Sep 2026 15:30:54 +0000https://curasec.metacog.co.kr/insights/2026-09-22-wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss/Tue, 22 Sep 2026 15:30:54 +0000https://curasec.metacog.co.kr/insights/2026-09-22-wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss/<ul> <li><strong>Engineer — Act:</strong> A public PoC on GitHub makes exploitation practical despite a low EPSS score; the anonymous-commenter-to-admin-RCE chain is severe. Patch WordPress core to version 7.1.1 immediately across all managed sites.</li> <li><strong>SOC/IR — Plan:</strong> No confirmed in-the-wild exploitation yet, but the public PoC makes detection work urgent this quarter. Build rules to flag suspicious JavaScript payloads in WordPress comment submissions and unexpected server-side execution correlated with admin page visits.</li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2026-93485 — CISA KEV: not listed, EPSS 0.00, public PoC on GitHub</li> </ul>