---
id: 6084
title: "How Two WordPress Core Bugs Chained into Pre-Auth RCE"
source_domain: bugbunny.ai
source_url: "https://bugbunny.ai/blog/wordpress-7-0-2-rce-deep-dive"
published_at: "2026-07-18T00:00:00Z"
tags: ["rce", "vulnerability-research", "attack-chains", "rest-api", "sql-injection", "wordpress", "pre-auth", "patching", "vulnerability-chain"]
phying_url: "https://phying.com/item/6084"
lang: en
---

# How Two WordPress Core Bugs Chained into Pre-Auth RCE

## Summary

WordPress deep dive: REST batch-route confusion plus a scalar SQL injection, bridged via the object cache, Customizer and nested REST dispatch, formed a pre-auth RCE chain—fixed in 7.0.2, 6.9.5 and 6.8.6.

## Intelligence Metadata

- **Sources:** bugbunny.ai
- **Published:** 2026-07-18T00:00:00Z
- **Original:** https://bugbunny.ai/blog/wordpress-7-0-2-rce-deep-dive
- **Phying News:** https://phying.com/item/6084