Do Son 
TL;DR
WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an authenticated remote code execution flaw rated CVSS 8.8. The bug affects sites that use Imagick and Ghostscript. No exploitation has been confirmed.
Why it matters
WordPress powers a large share of the web. So a remote code execution bug in its core draws instant attention. This flaw turns permission to upload media into the ability to run server code.
The attacker needs only an Author-level account. That role is far more common than admin access. Therefore, sites with guest authors or contributors face real exposure.
How the attack works
The flaw sits at WordPress’s image-processing boundary. A user with the upload_files capability uploads a crafted PostScript file. ImageMagick then hands that file to Ghostscript for processing.
According to the advisory, the weakness lives in Ghostscript’s handling of certain embedded files. That path completes the route to remote code execution. The official WordPress 7.0.4 security release details the fix and credits pwn.ai for the report.
Exploitation status
No public proof-of-concept exists yet. Likewise, no in-the-wild attacks have been confirmed. One tracker rates exploitation as unlikely for now.
Still, the risk is not merely theoretical. Many sites run multiple authors or guest contributors. A single compromised Author account could open the door.
Affected versions
The bug affects WordPress 4.7.0 through 7.0.3. Only servers running both Imagick and Ghostscript are exploitable. WordPress backported the fix across every branch to 4.7.
Patch and mitigation steps
Update to WordPress 7.0.4 right away. Most sites can update from Dashboard, then Updates. Automatic background updates will also roll out shortly.
Can’t patch immediately? Then check your image stack under Tools, Site Health, Info. Restricting Author accounts also reduces the risk of this remote code execution flaw.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
