AI Summary

WordPress has released a patch for a pre‑authentication reflected cross‑site scripting (XSS) vulnerability that appears on its login screen. The flaw is present in every version of the CMS. Security researchers at pwn.ai showed that an attacker could chain the XSS into PHP code execution on the server when a logged‑in administrator visits a malicious page. The update addresses the issue to prevent such exploitation.

AI summaries can be wrong sometimes—always verify important details using the source article.