#wp2shell

Critical wp2shell WordPress flaws exploited to install webshells

Jul 21, 2026 // 19:56

Hackers are exploiting the “wp2shell” critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. […]

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Jul 21, 2026 // 12:29

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable […]

WordPress Core “wp2shell” RCE flaws get public exploits, patch now

Jul 19, 2026 // 00:58

Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. […]

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Jul 18, 2026 // 00:23

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. […]