XSS2Shell

Vulnerability

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

August 11, 2026

Last Seen

November 4, 2026

Overview

Recent Events

Related Clusters (3)

Critical WordPress XSS2Shell Flaw Enables Admin Takeover and RCE

Aug 11·3 sources

WordPress Vulnerability XSS2Shell Leads to Remote Code Execution

2d ago·1 sources

WordPress Comment2Shell Vulnerability Allows RCE via Anonymous Comments

Sep 22·2 sources

Related Articles (5)

pwn.ai's original XSS2Shell research

XSS2Shell (CVE-2026-64638): How a WordPress Login Bug Becomes Remote Code Execution

Tryhackme·3d ago

WordPress Comment2Shell Flaw Turns Comments Into RCE

Cyberkendra·Sep 22

WordPress 'XSS2Shell' flaw allows admin takeover and remote code execution

Scworld·Aug 11

WordPress 'XSS2Shell' flaw allows admin takeover and remote code execution

Scmagazine·Aug 11

Related Entities

Remote Code Execution Sql Injection CVE-2026-64638 CVE-2026-66804 CVE-2026-93485 CVE-2026-60137 CVE-2026-63030 CWE-79 - Cross-site Scripting (xss)CWE-89 - SQL Injection WordPress XSS Click2Shell