CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR — An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

wp2shell-PoC

wp2shell-PoC ⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited. Overview Proof-of-concept for the wp2shell vulnerability chain affecting WordPress Core, combining CVE-2026-63030 and CVE-2026-60137...

wp2shell-poc

wp2shell-poc Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory. This repository is not Searchlight Cyber's official checker. check confirms the SQLi path, read demonstrates database read, a...

wp2shell-rce

WP2Shell RCE An assessment and scanning utility designed to detect exposure to the WP2Shell exploit chain in WordPress Core installations across single endpoints or large target lists. ⚠️ Disclaimer Only scan systems you own or are authorized to assess. Unsanctioned scanning or testing of...

wp2shell

wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

wp2shell-poc

wp2shell PoC 首个针对 WordPress REST API 批量路由混淆链的基于时间的预认证 SQL 注入 PoC CVE-2026-63030 + CVE-2026-60137 实现了命令执行，而不仅仅是尝试破解管理员密码。 受影响版本： WordPress 6.9.0–6.9.4 和 7.0.0–7.0.1。已在 6.9.5 和 7.0.2 中修复。 root@kitploit: python3 poc.py https://target.example python3 poc.py https://target.example 'SELECT DATABASE'...

wp2shell-vulnerability-scanner

WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Overview WP2Shell Scanner is a bash utility that recursively searches a directory tree for WordPress installations and checks whether each site is running a...

CVE-2026-63030-POC

wp2shell — CVE-2026-63030 + CVE-2026-60137 One-day WordPress RCE exploit chain. Unauthenticated. CVSS 9.8. Zero dependencies — Python 3.8+ stdlib only. Affected Versions Branch| Vulnerable| Patched ---|---|--- 6.9.x| 6.9.0 – 6.9.4| ≥ 6.9.5 7.0.x| 7.0.0 – 7.0.1| ≥ 7.0.2 The Chain Two CVEs chained...

wp2shell

wp2shell-check Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 "wp2shell", a pre-authentication RCE chain in WordPress core REST API batch-route confusion → SQL injection → RCE. Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta full RCE chain; 6.8.0–6.8.5 SQL injection only,...

CVE-2026-63030

🚨 CVE-2026-63030 — WP2Shell WordPress REST API Route Confusion → Remote Code Execution A Critical WordPress Core vulnerability enabling REST API route confusion that can be chained with SQL Injection to achieve unauthenticated Remote Code Execution. 📖 Overview CVE-2026-63030 is a Critical...

wp2shell

🔍 wp2shell - WordPress CVE-2026-63030 Vulnerability Scanner & Exploit ⚡ Fast, Real-time Vulnerability Scanner & Exploit for CVE-2026-63030 wp2shell 📌 Overview wp2shell is a comprehensive toolkit for detecting and exploiting CVE-2026-63030 , a critical vulnerability in WordPress that allows...

abdal-cve-2026-63030

English | فارسی 🛡️ Abdal CVE-2026-63030 PoC Exploits Abdal CVE-2026-63030 is a defensive WordPress exposure verifier for the REST API batch route confusion tracked as CVE-2026-63030. The issue can be chained with CVE-2026-60137 on affected WordPress releases and may lead to remote code execution...

CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 Proof of Concept Research, Exploit Development & Documentation by Ch4120N ⚠️ Legal Disclaimer This repository and the accompanying tool exploit.py are intended strictly for educational purposes, authorized penetration...

CVE-2026-49468-LiteLLM-Auth-Bypass

CVE-2026-49468 — LiteLLM Unauthenticated Auth Bypass via Host-Header Route Confusion Pre-authentication authentication/authorization bypass in the LiteLLM proxy BerriAI. A single crafted Host header makes the proxy evaluate its auth decision against a public health route while FastAPI still...

wp2shell-poc2

wp2shell-poc 针对 WordPress 核心中未经验证的 SQL 注入的概念验证，该漏洞通过 REST 批量路由混淆（CVE-2026-63030）链式利用实现远程代码执行。 该漏洞利用无需任何凭据，除可达的目标外也无需任何配置。它通过单个端点到达注入点：POST /wp-json/batch/v1。 核心发现是未经验证的 SQL 注入——check 可确认漏洞存在，read 可演示任意数据库读取。shell 命令是可选的后渗透利用（恢复管理员凭据 → 上传插件 → 执行命令），用于展示完整影响；它并非漏洞本身。 受影响版本 分支| 受影响| 修复版本 ---|---|---...

wp2shell-poc2

wp2shell-poc Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion CVE-2026-63030. The exploit needs no credentials and no configuration beyond a reachable target. It reaches the injection through a single...

CVE-2026-63030-wp2r00t

wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A self-contained proof-of-concept for the unauthenticated blind SQL injection reachable through the WordPress REST batch endpoint /wp-json/batch/v1. It is an independent implementation built from the published vulnerability mechanics. Offici...

wp2shell-lab

wp2shell-lab Educational PoC and lab for CVE-2026-63030 + CVE-2026-60137 : pre-authentication SQL injection in WordPress core via REST batch-route confusion. Discovered by Adam Kues Searchlight Cyber / Assetnote. Fixed in WordPress 6.9.5 / 7.0.2. Quick start root@kitploit: bring up the vulnerable...

wp-cve-2026-63030-check

wp2shell-check Non-intrusive exposure checker for the WordPress "wp2shell" pre-authentication RCE chain CVE-2026-63030 + CVE-2026-60137. ⚠️ Authorized use only. Run this only against WordPress instances you own or have explicit permission to test. It is a triage aid, not an exploit. Scanning...