2873 matches found
WordPress 5.6+ SkelerSecurity Core Security Plugin REST Batch API Mitigation
This WordPress plugin provides a temporary mitigation for the REST Batch API vulnerability chain commonly referred to as "wp2shell." It requires authentication before requests to the /wp-json/batch/v1 and ?restroute=/batch/v1 endpoints are processed, preventing unauthenticated exploitation of the...
Exploit for CVE-2026-63030
wp2shell: WordPress Batch RCE A technical breakdown of CVE-20...
Exploit for CVE-2025-9951
CVE-2025-9951 FFmpeg JPEG 2000 exploitation research This rep...
Exploit for CVE-2026-63030
wp2shell — CVE-2026-63030 + CVE-2026-60137 One-day WordPres...
Exploit for CVE-2026-63030
CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated d...
Exploit for CVE-2026-60137
wp2shell-scanner by @bahartanirhttps://github.com/baha...
Exploit for CVE-2026-60137
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Ruoyi-Scan
Ruoyi-Scan — RuoYi-specific vulnerability scanning tool 2...
Exploit for CVE-2026-63030
wp2shell Pre-Authentication Remote Code Execution in WordPres...
Exploit for CVE-2026-63030
CVE-2026-63030 The WordPress REST API batch routing confusi...
Exploit for CVE-2026-60137
wp2shell-detect Blackbox, non-intrusive detector for wp...
Exploit for CVE-2026-63030
wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...
Exploit for CVE-2026-63030
WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE...
wp2shell_stock_chain
wp2shell stock-core chain Authorized-testing proof of concept...
Exploit for CVE-2026-63030
wp2shellscanner !smokehttps://github.com/zi3lak/wp2shell...
wp2shell
wp2shell WordPress REST batch route-confusion blind SQL injec...
Imperva Customers Protected Against “wp2shell” Pre-Authentication RCE in WordPress Core
TL;DR : A critical pre-authentication Remote Code Execution RCE vulnerability, dubbed "wp2shell" CVE-2026-63030, has been identified in WordPress Core. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a vulnerable WordPress installation without any preconditions,...
Essity: Unauthenticated SQL Injection via REST Batch Route Confusion ████████
A vulnerability was discovered in the WordPress REST API batch endpoint /wp-json/batch/v1 on a certain website. The vulnerability allowed unauthenticated blind SQL injection by nesting a crafted batch payload, which triggered a route-dispatch desynchronization. This caused a user-controlled strin...