Frequency
2
occurrences
First Seen
July 20, 2026
Last Seen
July 20, 2026
Related Threat Clusters
-
Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress
A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as…
78 articles · Updated July 20, 2026
Recent Intelligence Reports
- Attackers pummel critical WordPress vuln to create all sorts of mischief — Theregister · July 20, 2026
- 'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover — Darkreading · July 20, 2026
Related Entities
Data Breach
Sql Injection
CVE-2026-60137
CVE-2026-63030
CWE-200 - Exposure of Sensitive Information
CWE-287 - Improper Authentication
CWE-862 - Missing Authorization
Cwe-89 - SQL Injection
T1041 - Exfiltration Over C2 Channel
T1136 - Create Account
T1190 - Exploit Public-Facing Application
T1505.003 - Web Shell