Due to a serious vulnerability in the WordPress system and the REST API mechanism, an attacker can remotely break into the server without any additional information (such as login-password) (RCE).

A statement by post author, said on 2026-07-21. Statements are as reported by the cited publishers — not verified by DecisionGateway.

WordPress tizimi va REST API mexanizmidagi jiddiy zaiflik sabab hujumchi hech qanday qo'shimcha ma'lumotlarsiz (masalan, login-parol) serverga masofadan buzib kirishi mumkin (RCE).