Your Contact Form Just Became a Backdoor (Patch Now)
Somewhere right now, a WordPress "Contact Us" form is quietly accepting résumés, RSVPs, and — thanks to a very bad bug — arbitrary PHP web shells from total strangers. Nothing says "please reach out anytime" quite like an open invitation fo…