A critical unauthenticated vulnerability in WordPress Core, nicknamed wp2shell, is being actively exploited. If you run a WordPress site, check and update to version 6.9.5 or 7.0.2 immediately.