Exploitation in the Wild of wp2shell

Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core CVE-2026-63030 & CVE-2026-60137. Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations...

Exploit for CVE-2026-63030

Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Ambiente D...

Exploit for CVE-2026-63030

wp2shell-check Non-intrusive exposure checker for the WordPre...

Exploit for CVE-2026-63030

wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-601...

Exploit for CVE-2026-63030

wp2shell \CVE-2026-63030/CVE-2026-60137 Pre Authentication...

Exploit for CVE-2026-60137

Compromise Scanner for wp2shell read-only A standalone, r...

Exploit for CVE-2026-60137

wp2shell-scanner by @bahartanirhttps://github.com/baha...

Exploit for CVE-2026-60137

wp2shell-detect Blackbox, non-intrusive detector for wp...

Exploit for CVE-2026-63030

wp2shellscanner !smokehttps://github.com/zi3lak/wp2shell...

Imperva Customers Protected Against “wp2shell” Pre-Authentication RCE in WordPress Core

TL;DR : A critical pre-authentication Remote Code Execution RCE vulnerability, dubbed "wp2shell" CVE-2026-63030, has been identified in WordPress Core. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a vulnerable WordPress installation without any preconditions,...

Exploit for CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronizat...

wp2shell-PoC

wp2shell — CVE-2026-63030 + CVE-2026-60137 WordPress Pre-Auth...

Exploit for CVE-2026-60137

wp2shell-scanner Non-destructive detection for WordPress core...