An unauthenticated file-inclusion bug in WordPress core can reach remote code execution on some servers. CISA added it to its exploited-flaws catalog on September 25.
Two weeks after directors tried to put him on paid leave, Matt Mullenweg installed a new board and advisers at the WordPress.com owner, where he said in 2024 that he controls 84% of voting rights.
