31 matches found
Ultimate-wp2shell
WP2Shell – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 WP2Shell. Overview This repository provides a defensive detection and validation proof of concept for the WordPress Core...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...
wp2shell-Exploit-Waf-Bypass
| \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Unauthenticated Remote Code Execution on WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Patched in 6.8.6, 6.9.5, 7.0.2. Quick...
wp2shell_scanner
wp2shellscanner Non-intrusive detection scanner for recent WordPress core vulnerabilities — including the wp2shell pre-authentication RCE chain. wp2shellscanner.py fingerprints a WordPress site's core version and reads its publicly advertised REST API surface, then classifies each tracked core CV...
wp2shell-scanner
wp2Shell Scanner – con PoC CVE-2026-63030 e CVE-2026-60137 – scanner per la catena di vulnerabilità wp2shell di WordPress Strumento autorizzato per la ricerca sulla sicurezza con PoC opzionale di verifica dei comandi. wp2shell-scanner rileva la catena di vulnerabilità wp2shell di WordPress...
abdal-cve-2026-63030
English | فارسی 🛡️ Exploits PoC de Abdal CVE-2026-63030 Abdal CVE-2026-63030 es un verificador defensivo de exposición para WordPress que detecta la confusión de rutas en el endpoint por lotes de la API REST, rastreada como CVE-2026-63030. El problema puede encadenarse con CVE-2026-60137 en...
wp2shell
wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...
CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137 | ---|--- Nombre| wp2shell CVEs| CVE-2026-63030 desincronización por lotes, CVE-2026-60137 SQLi authornotin Afectado| WordPress 6.9.0 a 6.9.4, 7.0.0 a 7.0.1 Corregido en| 6.9.5, 7.0.2 Autenticación necesaria| Ninguna Encontrado por| Adam Kues Searchlight...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — Unauthenticated SQL Injection Proof of Concept C...
Exploit for Interpretation Conflict in Wordpress
WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-...
Exploit for SQL Injection in Wordpress
PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137...
wp2shell-Exploit-Waf-Bypass
🛡️ wp2shell-Exploit-Waf-Bypass - Turn WordPress Vulnerabilitie...
Exploit for SQL Injection in Wordpress
|...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
wp2shell CVE-2026-63030 + CVE-2026-60...
Exploit for SQL Injection in Wordpress
CVE-2026-60137-With-Skip-...
Exploit for CVE-2026-63030
Plugin Acyber Wordpress !WARNING Temporary Emergency...
WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...