wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...

wp2shell-poc

wp2shell PoC The first ever poc of the pre-auth timing-based SQL injection PoC for the WordPress REST API batch-route confusion chain CVE-2026-63030 + CVE-2026-60137 Achieved command execution, without just trying to crack the admins password. Affected: WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Fixe...

Ultimate-wp2shell

WP2Shell – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 WP2Shell. Overview This repository provides a defensive detection and validation proof of concept for the WordPress Core...

wp2shell-vulnerability-scanner

WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Overview WP2Shell Scanner is a bash utility that recursively searches a directory tree for WordPress installations and checks whether each site is running a...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 English Description This lightweight WordPress plugin serves as a temporary virtual patch mitigation against the critical...

wp2shell-scanner

wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-60137 – WordPress wp2shell vulnerability-chain scanner Authorized security-research tool with optional command-verification PoC. wp2shell-scanner detects the WordPress wp2shell vulnerability chain by validating public WordPress evidence,...

abdal-cve-2026-60137

English | فارسی 🛡️ Abdal CVE-2026-60137 PoC Exploits Abdal CVE-2026-60137 is a defensive WordPress exposure verifier for the insufficient sanitization of the authornotin parameter in WPQuery, tracked as CVE-2026-60137. The vulnerability can allow SQL injection when untrusted input reaches the...

wp2shell-detect

wp2shell-detect Blackbox, non-intrusive detector for wp2shell — the pre-authentication RCE chain in WordPress core disclosed on 2026-07-17: CVE-2026-63030 — route confusion in the REST batch endpoint /wp-json/batch/v1: a sub-request whose path fails wpparseurl lands in the validation array but no...

wp2shell-scanner

wp2shell-scanner by@bahartanir katherinepierce Fork of ZephrFish/wp2shell-scanner with additional improvements. Research by Adam Kues Assetnote and Mustafa Can İPEKÇİ nukedx. Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are select...

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...

wp2shell

wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...

CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 | ---|--- Name| wp2shell CVEs| CVE-2026-63030 batch desync, CVE-2026-60137 authornotin SQLi Affected| WordPress 6.9.0 to 6.9.4, 7.0.0 to 7.0.1 Fixed in| 6.9.5, 7.0.2 Auth needed| None Found by| Adam Kues Searchlight Cyber / Assetnote Usage Bare host = auto...

wp2shell-scanner

wp2shell-scanner Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are selected with a flag, and the target is positional. --scan fingerprints the core version and confirms the REST /batch/v1 route is reachable without sending an explo...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell xpl0ited by gr1tx WP2Shell is a Python-based Proof-of-Concept PoC for CVE-2026-63030. It performs time-based vulnerability verification against the WordPress Batch API and generates detailed HTML and JSON reports. The project is intended for authorized security...

CVE-2026-63030-CVE-2026-60137

wp2shell Pre-Auth RCE PoC - CVE-2026-63030 + CVE-2026-60137 WordPress 6.9.0–6.9.4 / 7.0.0–7.0.1 Только для авторизованного тестирования на проникновение и исследований в области безопасности. Запуск этого инструмента против систем без письменного разрешения является незаконным. Авторы не несут...

Wp2shell-ioc-scanner

wp2shell IOC Scanner Version 1.4.0 · GPL-2.0-or-later · WordPress 6.0+ · PHP 7.4+ A read-only-by-default triage tool for the WordPress core vulnerabilities CVE-2026-60137 and CVE-2026-63030 “wp2shell”. It checks patch state, accounts, durable database artifacts and file integrity, separates...

EXPLOIT-CVE-2026-63030

Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Intentionally vulnerable Docker environment with WordPress Core 7.0.1 and a Python exploit demonstrating the pre-authentication wp2shell chain: CVE| Component| What it is ---|---|--- CVE-2026-63030| REST API /wp-json/batch/v1| Route confusion :...

cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RCE Chain Discoverer: Searchlight Cyber via GPT-5.6 Sol Severity: Critical — CVSS 9.8 CVE-2026-63030, CVSS 9.1 CVE-2026-60137 Status: Actively exploited — added to CISA KEV Alias: "wp2shell" Overview This is an unauthenticated remote cod...