Wp2shell - Vulnerability

Related Threat Clusters

• Critical RCE and SQL Injection Vulnerabilities in WordPress Disclosed

  On July 17, 2026, WordPress disclosed two critical vulnerabilities, CVE-2026-63030 and CVE-2026-60137, affecting its core software. CVE-2026-63030 is a remote code execution (RCE) vulnerability in the REST API, while…

  6 articles · Updated July 17, 2026
• Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress

  A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as…

  41 articles · Updated July 20, 2026
• Active Exploitation of Critical WordPress Vulnerabilities Threatens Millions of Sites

  Cybersecurity firms report that hackers are actively exploiting two critical vulnerabilities in WordPress versions 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1. WordPress recently patched these flaws, urging immediate updates.…

  8 articles · Updated July 20, 2026
• GPT-5.6 Discovers $500k WordPress RCE Vulnerability for $25

  Researchers at Searchlight Cyber utilized GPT-5.6 Sol Ultra to identify a critical pre-authentication remote code execution (RCE) vulnerability in WordPress. The AI model reportedly found the vulnerability after…

  2 articles · Updated July 20, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1059 articles · Updated February 9, 2026

Recent Intelligence Reports

• Wp2shell — www.vulncheck.com · July 21, 2026
• Wp2shell Pre Authentication Rce In Word Press Core — slcyber.io · July 21, 2026
• Hackers Are Exploiting Recently Patched WordPress Bugs, Putting Millions of Websites at Risk — Rss.Slashdot · July 21, 2026
• Attackers pummel critical WordPress vuln to create all sorts of mischief — Theregister · July 20, 2026
• wp2shell: WordPress RCE (CVE-2026-63030) — Secra.Es · July 20, 2026
• WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) — Isc.Sans.Edu · July 20, 2026
• Hackers Exploit Patched WordPress Bugs - Millions of Sites Still at Risk — Gadgetreview · July 20, 2026
• Hackers Target Millions of WordPress Sites, Experts Urge Immediate Updates — Mezha · July 20, 2026

Related Entities