A WordPress libheif RCE chain and its PoC are now public. The libheif vulnerability turns an HEIC upload into code execution. Patch to 1.23.3.
#WordPress #libheif #RCE #ImageMagick #HEIC #PoC #WebSecurity #Vulnerability
http://securityonline.info/wordpress-libheif-rce/?utm_source=mastodon&utm_medium=jetpack_social