XSS to RCE – using WordPress as an example July 17, 2016 in xss, rce, wordpress, poc A real world example of how an XSS in the administration portal of a WordPress instance can lead to an RCE by uploading a webshell using the XSS. Continue reading