A blog comment can now zero-click hijack a WordPress admin session and drop a self-deleting PHP webshell. https://intel.threadlinqs.com/threat/TL-2026-2717 #ThreatIntel #CVE_2026_93485 #Comment2Shell #Comment2XSS

A blog comment can now zero-click hijack a WordPress admin session and drop a self-deleting PHP webshell. https://intel.threadlinqs.com/threat/TL-2026-2717 #ThreatIntel #CVE_2026_93485 #Comment2Shell #Comment2XSS
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session reconbee.com/wordpress-co...
#wordpress #comment2shell #CommentXSS #RCE #cybersecurity #cyberattack
Comment2Shell (CVE-2026-93485) lets an anonymous WordPress comment reach RCE via an admin session. Fixed in 7.1.1 — update now.
www.cyberkendra.com/2026/09/comm...