79 matches found
Exploit for Interpretation Conflict in Wordpress
LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for education...
wp2shell-PoC
wp2shell-PoC ⚠ 本工具仅用于教育或漏洞赏金目的。严禁在受控环境之外未经授权使用。 概述 针对影响 WordPress 核心的 wp2shell 漏洞链的概念验证（PoC），结合了 CVE-2026-63030 和 CVE-2026-60137。该项目演示了 REST API 批量路由混淆漏洞与 WPQuery SQL 注入之间的相互作用，形成一条无需认证即可完全入侵 WordPress 并实现远程代码执行（RCE）的路径。 阅读完整公告此处 工作原理 wp2shell 是 WordPress 核心中的一个认证前 RCE 链，结合了 CVE-2026-63030（批量 RES...
wp2shell-poc
wp2shell-poc Independent proof-of-concept for the unauthentic...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 — wp2shell Lab Pre-Authentication RCE in W...
Exploit for Interpretation Conflict in Wordpress
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for educationa...
wp2shell-Hestia-Scanner — Updated!
🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...
wp2shell
Command-Line Arguments Argument Type Default Description -u, --u...
wp2shell-ultimate
wp2shell-poc Independent proof-of-concept for the unauthentic...
Fedora 43 : wordpress (2026-46346e9637)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-46346e9637 advisory. Version 6.9.5 Security updates - A facilitated SQL injection issue - A REST API batch-route confusion and SQL injection issue leading to Remote Code Executio...
BIT-WORDPRESS-MULTISITE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
wp2shell
wp2shell-poc Independent proof-of-concept for the unauthentic...
Exploit for SQL Injection in Wordpress
CVE-2026-63030 & CVE-2026-60137 — wp2shell WordPress Cor...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...
Exploit for CVE-2026-63030
WP2Shell Detector and Validation PoC !License: MIThttps:/...