WordPress fixes POP chain exposing websites to RCE attacksWordPress has released version 6.4.2 that addresses a remote code execution (RCE) vulnerability that could be chained with another flaw to allow attackers run arbitrary PHP code on the target website. [...]
Source: WordPress fixes POP chain exposing websites to RCE attacks (https://www.bleepingcomputer.com/news/security/wordpress-fixes-pop-chain-exposing-websites-to-rce-attacks/)