Exploit for SQL Injection in Wordpress

|...

Exploit for Interpretation Conflict in Wordpress

wp2shell-hestia-scanner Read-only WordPress security scanner...

BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...

Exploit for Interpretation Conflict in Wordpress

wp2shell CVE-2026-63030 + CVE-2026-60...

Exploit for SQL Injection in Wordpress

CVE-2026-60137-With-Skip-...

Exploit for CVE-2026-63030

Plugin Acyber Wordpress !WARNING Temporary Emergency...

WordPress Core Interpretation Conflict Vulnerability

WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...

wp2shell-Wordpress-TOWN

wp2shell by : lucifer0xf Unauthenticated Remote Code...

Exploit for CVE-2026-63030

Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Ambiente D...

Exploit for CVE-2026-63030

wp2shell-check Non-intrusive exposure checker for the WordPre...

Exploit for CVE-2026-60137

wp2shell-scanner by @bahartanirhttps://github.com/baha...

Exploit for CVE-2026-60137

wp2shell Pre-authentication Remote Code Execution against Wor...

wp2shell-PoC

wp2shell — CVE-2026-63030 + CVE-2026-60137 WordPress Pre-Auth...

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 + CVE-2026-60137: Independent Root C...

Exploit for CVE-2026-60137

wp2shell-scanner Non-destructive detection for WordPress core...

PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain

On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase its impact to...

CVE-2026-60137

creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbqes2k2a 2026-07-17 21:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqd5kxgq2i 2026-07-17 22:19:07+00:00| seen|...