WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.
More info