Hollow Shell
Default credentials and a Zip Slip upload escape the theme directory and turn an automation hook into code execution.

2 posts
Default credentials and a Zip Slip upload escape the theme directory and turn an automation hook into code execution.

CVE-2025-55182 provides remote code execution before a permissive sudo path completes privilege escalation.
