GHSA lookup
GHSA-7HP8-65CH-5WHP
Pruva has a verified reproduction for GHSA-7HP8-65CH-5WHP: WordPress Core unauthenticated path traversal in get_page_template() page-template resolution leading to conditional RCE. The canonical evidence record is REPRO-2026-00356.
REPRO
REPRO-2026-00356
Package
WordPress/wordpress-develop · github
Severity
CRITICAL
Status
published