A critical WordPress vulnerability called wp2shell went public on July 17, and attackers were exploiting it in the wild within days. It is a genuinely serious flaw: it sits in WordPress core, needs no login, and hands an attacker the ability to run...
