From thehackernews.com
![wordpress remote code execution](https://1.bp.blogspot.com/-UM9PDFPmbWY/XGxX-Pa1yHI/AAAAAAAAzWo/JLwRjWn5WEEsZgCutKtcoVjoc6iqFslfACLcBGAs/s728-e100/wordpress-remote-code-execution-attack.png)
Exclusive — If you have not updated your website to the latest WordPress version 5.0.3, it’s a brilliant idea to upgrade the content management software of your site now. From now, I mean immediately.
Cybersecurity researchers at RIPS Technologies GmbH today shared their latest research with The Hacker News, revealing the existence of a critical remote code execution vulnerability that affects all previous versions of WordPress content management software released in the past 6 years.
The remote code execution attack, discovered and reported to the WordPress security team late last year, can be exploited by a low privileged attacker with at least an “author” account using a combination of two separate vulnerabilities—Path Traversal and Local File Inclusion—that reside in the WordPress core.