31 matches found
wp2shell-scanner
wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-60137 – WordPress wp2shell vulnerability-chain scanner Authorized security-research tool with optional command-verification PoC. wp2shell-scanner detects the WordPress wp2shell vulnerability chain by validating public WordPress evidence,...
abdal-cve-2026-63030
English | فارسی 🛡️ Abdal CVE-2026-63030 PoC Exploits Abdal CVE-2026-63030 is a defensive WordPress exposure verifier for the REST API batch route confusion tracked as CVE-2026-63030. The issue can be chained with CVE-2026-60137 on affected WordPress releases and may lead to remote code execution...
Ultimate-wp2shell
WP2Shell – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 WP2Shell. Overview This repository provides a defensive detection and validation proof of concept for the WordPress Core...
wp2shell
wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...
CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137 | ---|--- Name| wp2shell CVEs| CVE-2026-63030 batch desync, CVE-2026-60137 authornotin SQLi Affected| WordPress 6.9.0 to 6.9.4, 7.0.0 to 7.0.1 Fixed in| 6.9.5, 7.0.2 Auth needed| None Found by| Adam Kues Searchlight Cyber / Assetnote Usage Bare host = auto...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...
wp2shell-Exploit-Waf-Bypass
| \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Unauthenticated Remote Code Execution on WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Patched in 6.8.6, 6.9.5, 7.0.2. Quick...
wp2shell_scanner
wp2shellscanner Non-intrusive detection scanner for recent WordPress core vulnerabilities — including the wp2shell pre-authentication RCE chain. wp2shellscanner.py fingerprints a WordPress site's core version and reads its publicly advertised REST API surface, then classifies each tracked core CV...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — Unauthenticated SQL Injection Proof of Concept C...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-...
Exploit for SQL Injection in Wordpress
PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137...
wp2shell-Exploit-Waf-Bypass
🛡️ wp2shell-Exploit-Waf-Bypass - Turn WordPress Vulnerabilitie...
Exploit for SQL Injection in Wordpress
|...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
wp2shell CVE-2026-63030 + CVE-2026-60...
Exploit for SQL Injection in Wordpress
CVE-2026-60137-With-Skip-...
Exploit for CVE-2026-63030
Plugin Acyber Wordpress !WARNING Temporary Emergency...
WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...