ImageMagick Zero-Day Enables RCE on Linux and WordPress Servers

Octagon Networks reports a critical ImageMagick vulnerability that enables Remote Code Execution through crafted image uploads which bypass file-type checks; the flaw can chain into GhostScript and Magick Scripting Language to execute arbitrary commands, read credentials, write persistent backdoors, and cause rapid memory-exhaustion DoS. The issue affects major Linux distributions and WordPress sites (notably with plugins like Gravity Forms), and a partial fix released in November 2025 was not labeled as a security update, leaving many systems exposed until manual mitigation.