Lucene search
+L

3 matches found

Wordfence Blog
Wordfence Blog
added 2026/07/29 4:04 p.m.11 views

WP2Shell WordPress Exploit Technical Analysis and Real Attack Data

On July 17th, 2026, the WordPress Security Team released updates to WordPress core addressing a critical vulnerability chain that can be leveraged by unauthenticated attackers to create an administrator account and then execute code through normal administrator capabilities, such as uploading a...

9.8CVSS8.4AI score0.95605EPSS
SaveExploits76
The Hacker News
The Hacker News
added 2026/07/20 1:32 p.m.15 views

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs...

9.8CVSS9.5AI score0.45478EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/07/18 2:09 p.m.88 views

Exploit for CVE-2026-60137

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated...

9.8CVSS6.9AI score0.95605EPSS
SaveExploits76
Rows per page
Query Builder