Frequency
2
occurrences
First Seen
July 17, 2026
Last Seen
July 21, 2026
Related Threat Clusters
-
Critical RCE and SQL Injection Vulnerabilities in WordPress Disclosed
On July 17, 2026, WordPress disclosed two critical vulnerabilities, CVE-2026-63030 and CVE-2026-60137, affecting its core software. CVE-2026-63030 is a remote code execution (RCE) vulnerability in the REST API, while…
6 articles · Updated July 17, 2026 -
Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress
A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as…
78 articles · Updated July 20, 2026
Recent Intelligence Reports
- Cloudflare has added rules to its Web Application Firewall (WAF) — blog.cloudflare.com · July 21, 2026
- Cloudflare WAF protects WordPress applications from two high — Blog.Cloudflare · July 17, 2026