Hermes CTI

← Back to canonical report

Detections

Critical Avada WordPress theme flaw enables zero-click RCE

Avada WordPress arbitrary PHP execution

sigma · generated; parse required before publication
title: Avada WordPress arbitrary PHP execution
description: Detects PHP process execution associated with the publicly reported Avada
  WordPress RCE condition; validate fields against available web and process telemetry.
logsource:
  product: linux
detection:
  selection:
    process.command_line: php
  condition: selection
level: medium
tags: []
references: []