wp2shell-poc

Wie funktioniert das überhaupt Wie sich dieser PoC von den öffentlichen wp2shell-Exploits unterscheidet Alle PoCs nutzen dieselben zwei Schwachstellen – die REST-Batch-Routen-Verwirrung CVE-2026-63030 und die authornotin SQL-Injection CVE-2026-60137 – mit derselben doppelt verschachtelten...

wp2shell-lab

wp2shell-lab PoC e laboratório educativo para CVE-2026-63030 + CVE-2026-60137 : injeção SQL pré-autenticação no core do WordPress via confusão de rota batch. Descoberto por Adam Kues Searchlight Cyber / Assetnote. Corrigido no WordPress 6.9.5 / 7.0.2. Início rápido root@kitploit: iniciar o...

WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE

Description WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...