Massive hole found in WordPress – Unauthenticated Remote Code Execution (RCE) PoC Exploit
At least 25% of all pages on the web work under WordPress. If you are managing WordPress site and have not installed 4.7.4 update yet, please take a few moments and update your WordPress to the latest version. If you won’t do it, there is a risk that someone else (cracker) will do it for you! There is an exploit for the default installation of WordPress, without any plugins, just plain < 4.7 version.