Wp-shellstorm is a apt_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 20, 2026; most recent activity July 20, 2026.
A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as…