WPDeeply

Download free plugin

Remote Code Execution

13

Guides

All 84 Plugin Security 40 Security Research 36 Vulnerability Types 11 Hardening 9 Security News 7 Malware 5 WordPress Insights 4 RSS

WordPress Null Byte to RCE: What an Old 0-Day Pattern Teaches Us Null byte issues are old, but the lesson is current: never trust file names, extensions, or paths until the exact runtime behavior is understood. Vulnerability Types 12 Jul 2020, 2 min WordPress Write Image to Any Directory RCE: File Writes and Code Execution An arbitrary file write becomes urgent when attackers can choose both content and location. If executable paths are reachable, image handling can turn into code execution. Vulnerability Types 12 Jul 2020, 2 min WordPress Arbitrary File Delete: How a Small Path Bug Can Break a Site Arbitrary file delete is serious because deleting the right file can disable security controls, break the site, or set up a second-stage takeover. Vulnerability Types 12 Jul 2020, 2 min