A remote code execution vulnerability in the WordPress core allows authenticated attackers to execute arbitrary code via malicious file uploads.

The application fails to properly validate file types during the upload process, allowing an Author-level user or higher to upload malicious Postscript files. This results in unrestricted file uploads, which can be leveraged to achieve remote code execution on the underlying server.

Successful exploitation allows an attacker to execute arbitrary code, leading to full server compromise, data exfiltration, and potential lateral movement within the network. With a CVSS score of 8.8, this vulnerability poses a severe risk to the confidentiality, integrity, and availability of the entire WordPress environment.

Immediate Action: Update WordPress core to version 7.0.4 or later immediately.

Proactive Monitoring: Scan for suspicious files in the upload directories and monitor server logs for unauthorized script execution attempts.

Compensating Controls: Implement strict file upload policies and utilize a Web Application Firewall (WAF) to block malicious file extensions and known attack patterns.

Public Exploit Available: Yes (public GitHub PoC repository)

This vulnerability requires immediate attention due to the availability of a public proof-of-concept and the high impact of remote code execution. Administrators should prioritize patching to the latest version to mitigate the risk of full system compromise.