Critical SQL Injection and RCE Vulnerabilities in Fedora WordPress Updates

Fedora has released security updates for WordPress versions 6.9.5 addressing critical SQL injection and remote code execution vulnerabilities. The vulnerabilities stem from a REST API batch-route confusion, allowing attackers to exploit the system remotely. Users of Fedora 43 and 44 are affected, with the updates issued on July 30, 2026. The vulnerabilities were confirmed by Remi Collet, who released the updates. Administrators are urged to audit Linux privileges to mitigate potential compromises. The updates can be installed using the 'dnf' package manager. The vulnerabilities pose a significant risk, necessitating immediate action from system administrators.

Key Points: • Fedora 43 and 44 WordPress versions 6.9.5 are affected by critical vulnerabilities. • SQL injection and remote code execution issues can be exploited via the REST API. • System administrators are advised to audit privileges and apply updates immediately.