Analyzing Click2Shell: How WordPress 7.1.1 Patched a Multi-Stage CSRF to RCE Chain
WordPress 7.1.1 addresses Click2Shell, a complex multi-stage vulnerability discovered by Paulos Yibelo that combines CSRF, frontend selector injection, and Customizer preview hooks