One click makes an admin's browser silently install a theme - then WordPress hands attackers RCE. https://intel.threadlinqs.com/threat/TL-2026-2587 #ThreatIntel #click2shell_pocpy #Click2Shell #WordPress