HTTP/2 upload use-after-free that a malicious server can trigger; code execution was demonstrated under strict conditions.
WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.