Lucene search
+L

3 matches found

Wordfence Blog
Wordfence Blog
•added 2026/07/29 4:04 p.m.•18 views

WP2Shell WordPress Exploit Technical Analysis and Real Attack Data

On July 17th, 2026, the WordPress Security Team released updates to WordPress core addressing a critical vulnerability chain that can be leveraged by unauthenticated attackers to create an administrator account and then execute code through normal administrator capabilities, such as uploading a...

9.8CVSS8.8AI score0.10119EPSS
SaveExploits87
The Hacker News
The Hacker News
•added 2026/07/20 1:32 p.m.•21 views

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs...

9.8CVSS9.5AI score0.15873EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2026/07/18 2:09 p.m.•98 views

Exploit for CVE-2026-60137

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated...

9.8CVSS8.5AI score0.10119EPSS
SaveExploits87
Rows per page
Query Builder