A few days ago, “wp2shell” made the rounds — an unauthenticated RCE chain in WordPress, cobbled together...
wp2shell
I stumbled across this article — fair warning, it’s in German, apparently the anglophone tech press...

apt-upgrade.me – Homelab, Linux & DevSecOps
One nerd's homelab: Linux, Kubernetes, security, and the occasional disaster.