Patch now: WordPress REST API bug allows remote code execution

A remote code execution vulnerability in WordPress Core's REST Batch API allows unauthenticated attackers to execute arbitrary code on affected sites. The flaw requires immediate patching across WordPress installations. If you run WordPress or sell to WordPress shops, your customer base just became a target for unauthenticated code execution—patch deployment is now your immediate support bottleneck, and unpatched sites become liabilities within days. This is a move for you: call your biggest customers today and confirm their patch status, or you'll be managing breach fallout instead.