33 matches found
WP2Shell-CVE-2026-63030-POC
WP2Shell Detector and Validation PoC CVE coverage: CVE-2026-63030 and CVE-2026-60137 Intended use: Authorized security testing, defensive validation, and disposable localhost labs only WP2Shell is a WordPress Core vulnerability chain combining a pre-authentication REST API batch-route confusion b...
CVE-2026-63030
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Batch Route Confusion + CVE-2026-60137 SQL Injection Zero-dependency exploitation toolkit for the wp2shell vulnerability chain in WordPress Core. A single anonymous HTTP request achieves remote code execution on a default WordPress installatio...
sxwp2shell
/ / / / / / | |/ / / / / / / / / / | // / / / / / / / / / / / / // | / /// / // // / // / /|| sxwp2shell — Exploit RCE pre-autenticación para WordPress mediante confusión de ruta batch en la API REST CVE-2026-63030 + inyección SQL CVE-2026-60137. Afecta: WP 6.9.0–6.9.4 / 7.0.0–7.0.1 Instalación g...
CVE-2026-63030
CVE-2026-63030 WordPress REST API batch route confusion + SQL injection leading to unauthorized admin creation → Remote Code Execution RCE complete exploit chain PoC. For authorized security testing, vulnerability reproduction, and research only. Do not use against unauthorized targets...
wp2shell
wp2shell Pre-authentication Remote Code Execution against WordPress Core. Chains CVE-2026-60137 SQLi in authornotin / authorexclude parameter of WPQuery with CVE-2026-63030 REST API batch-route confusion for unauthenticated RCE. Affected Versions Range| Status ---|--- = 6.8.5| Not affected no bat...
wp2shell
wp2shell by: ek0ms savi0r Unauthenticated Remote Code Execution for WordPress Core POC CVE-2026-63030 + CVE-2026-60137 wp2shell exploit for a critical vulnerability chain in WordPress core. It chains a REST API batch route confusion bug with an SQL injection in WPQuery to achieve unauthenticated...
wp2shell-poc
wp2shell 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN WordPress Core Pre-Authentication RCE Chain wp2shell is a security research Proof-of-Concept demonstrating a pre-authentication vulnerability chain in...
wp2shell
CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: WordPress 코어의 인증 없는 원격 코드 실행 RCE REST API 배치 라우트 혼동CVE-2026-63030과 WPQuery authornotin SQL 인젝션CVE-2026-60137의 체이닝 → 기본 WordPress 설치에 대한 인증 전 원격 코드 실행. Adam KuesAssetnote / Searchlight Cyber가 발견, 2026-07-17 공개. 권고: GHSA-ff9f-jf42-662q,...
Wp2Shell
wp2shell Ejecución remota de código sin autenticación en el núcleo de WordPress. CVE-2026-60137 Inyección SQL en WPQuery encadenada con CVE-2026-63030 Confusión de ruta de lotes en la API REST. Solo para fines educativos e investigación de seguridad autorizada. Versiones afectadas WordPress 6.9.0...
CVE-2026-63030
LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CVE-2026-63030 Chained with CVE-2026-60137 Severity: Critical CVSS 9.8 Type: Pre-Authentication Remote Code Execution RCE ⚠️ Disclaimer This tool is provided strictly for educational purposes and authorized security testing only. By using this tool,...
wp2shell
wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...
wordpress_exploit
Vulnerable Lab: CVE-2026-63030 WordPress This environment r...
Exploit for Interpretation Conflict in Wordpress
LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-...
Exploit for Interpretation Conflict in Wordpress
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for educationa...
wp2shell-ultimate
wp2shell-poc Independent proof-of-concept for the unauthentic...
Fedora 43 : wordpress (2026-46346e9637)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-46346e9637 advisory. Version 6.9.5 Security updates - A facilitated SQL injection issue - A REST API batch-route confusion and SQL injection issue leading to Remote Code Executio...
BIT-WORDPRESS-MULTISITE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...