<p>A <a
href="https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp">critical
vulnerability</a> has been discovered in <a
href="https://wordpress.org/">WordPress</a>'s <a
href="https://developer.wordpress.org/reference/functions/get_page_template/"><tt>get_page_template()</tt></a>
function for page-template resolution that could allow remote-code execution
(RCE) by an unauthenticated attacker, in some limited circumstances. The project
has provided an update for the most recent branch of WordPress, as well as
backports of the fix for branches back to <a
href="https://wordpress.org/download/releases/#branch-47">4.7</a>. See the
vulnerability for the conditions required for an RCE attack to be successful.</p>

<p>The vulnerability <a
href="https://forums.classicpress.net/t/critical-unauthenticated-path-traversal-vulnerability-patched-in-wordpress-core/6775">also
affects</a> the <a href="https://www.classicpress.net/">ClassicPress</a> fork of
WordPress, though a security update has not been provided for that project
yet. LWN <a href="https://lwn.net/Articles/992219/">covered</a> ClassicPress in
2024. Users of either content-management system should update soon.</p>

<p></p>