WP2Shell

WP2Shell - WordPress Pre-Auth RCE Exploit CVE-2026-63030 + CVE-2026-60137 Version: 4.0.0 Author: G0D150NE 📌 Overview WP2Shell is a full-chain exploit tool for WordPress pre-authentication remote code execution. It combines two critical vulnerabilities: CVE-2026-63030 - SQL Injection in REST API...

CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC Description Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress versions 6.9.0 through 7.0.1. It chains: REST API batch route confusion validation vs dispatch mismatch SQL injection via...

Exploit for CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...

Exploit for CVE-2026-60137

Compromise Scanner for wp2shell read-only A standalone, r...