2869 matches found
Exploit for CVE-2026-63030
CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated d...
Exploit for CVE-2026-60137
wp2shell-scanner by @bahartanirhttps://github.com/baha...
Exploit for CVE-2026-60137
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Ruoyi-Scan
Ruoyi-Scan — RuoYi-specific vulnerability scanning tool 2...
Exploit for CVE-2026-63030
wp2shell Pre-Authentication Remote Code Execution in WordPres...
Exploit for CVE-2026-63030
CVE-2026-63030 The WordPress REST API batch routing confusi...
Exploit for CVE-2026-60137
wp2shell-detect Blackbox, non-intrusive detector for wp...
Exploit for CVE-2026-63030
wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...
Exploit for CVE-2026-63030
WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE...
wp2shell_stock_chain
wp2shell stock-core chain Authorized-testing proof of concept...
Exploit for CVE-2026-63030
wp2shellscanner !smokehttps://github.com/zi3lak/wp2shell...
wp2shell
wp2shell WordPress REST batch route-confusion blind SQL injec...
Imperva Customers Protected Against “wp2shell” Pre-Authentication RCE in WordPress Core
TL;DR : A critical pre-authentication Remote Code Execution RCE vulnerability, dubbed "wp2shell" CVE-2026-63030, has been identified in WordPress Core. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a vulnerable WordPress installation without any preconditions,...
Essity: Unauthenticated SQL Injection via REST Batch Route Confusion ████████
A vulnerability was discovered in the WordPress REST API batch endpoint /wp-json/batch/v1 on a certain website. The vulnerability allowed unauthenticated blind SQL injection by nesting a crafted batch payload, which triggered a route-dispatch desynchronization. This caused a user-controlled strin...
Exploit for CVE-2026-60137
wp2shell Pre-authentication Remote Code Execution against Wor...
Exploit for CVE-2026-63030
wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A sel...
Exploit for CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...
wp2shell-go
wp2shell-go A Go port of the wp2shell PoC. It targets the una...
WordPress vulnerabilities can be addressed through Automattic.
There are two vulnerabilities present in WordPress Core 6.8.6, 6.9.5, and 7.0.2. An unauthorized malicious individual can exploit these vulnerabilities to execute arbitrary code remotely. To do this, a malicious HTTP request must be sent to the batch API of a WordPress site. Since vulnerabilities...