Attacks Dictionary
Remote code execution
Definition
Remote code execution is a vulnerability that lets an attacker run attacker-controlled code on the server.
Also called: RCE, remote code execution vulnerability
Why it matters for WordPress
RCE is near the top of the severity ladder. If a plugin or theme flaw lets someone execute PHP or shell commands, they can drop a webshell, read wp-config.php, or pivot further. Public RCE CVEs get scanned quickly. Treat them as drop-everything updates.
How it shows up in practice
- Advisories labeled critical with “unauthenticated RCE” or “authenticated RCE”
- New PHP files appearing after exploit traffic in the logs
- Host notice that the account was used to attack other sites
- Privilege-escalation bugs that chain into code execution
What to do
- Update or remove the affected component as soon as a fix exists.
- If you cannot patch yet, disable the plugin and restrict access while you plan.
- After any suspected RCE, assume compromise: scan, rotate secrets, hunt backdoors.
- Keep file upload and capability checks honest in custom code so you do not invent your own RCE.
Go deeper
Want the full walkthrough?
This page stays short on purpose. The guide covers steps, examples, and what to check on a live WordPress site.
Open full guideRelated terms
Nearby ideas in the dictionary
- Vulnerability A vulnerability is a weakness in software that attackers can abuse to break confidentiality, integrity, or availability.
- Webshell A webshell is a small script uploaded to the server that lets an attacker run commands through the browser.
- File upload vulnerability A file upload vulnerability lets an attacker place a dangerous file on the server, often leading to a webshell.
- CVE A CVE is a public identifier for a known cybersecurity vulnerability tracked in shared databases.
- Privilege escalation Privilege escalation is gaining higher access than intended, such as a subscriber becoming an administrator.