CVE-2026-63030

CVE-2026-63030: wp2shell WordPress 批量 API 去同步 SQL 注入漏洞利用工具 通过 CVE-2026-63030 wp2shell 漏洞提取用户和密码哈希的概念验证工具。 漏洞信息 CVE : CVE-2026-63030 wp2shell 关联 CVE : CVE-2026-60137 类型 : 预认证盲注 SQL 注入 受影响版本 : WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 修复版本 : 6.9.5, 7.0.2+ 使用方法 root@kitploit: python POC.py options 基本用法...

CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell exploitiert von gr1tx WP2Shell ist ein Python-basierter Proof-of-Concept PoC für CVE-2026-63030. Es führt eine zeitbasierte Schwachstellenverifizierung gegen die WordPress-Batch-API durch und erzeugt detaillierte HTML- und JSON-Berichte. Das Projekt ist für autorisierte...

wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: Análise Independente de Causa Raiz O núcleo do WordPress divulgou o wp2shell em 17/07/2026 como uma RCE crítica não autenticada que afeta instalações padrão WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, sem necessidade de plugins. O descobridor original Searchlight...

wp2shell

wp2shell CVE-2026-63030 + CVE-2026-60137+poc Esta vulnerabilidade não é muito fácil de explorar. Comando de execução de comandos no banco de dados: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Referência: https://github.com/Icex0/wp2shell-poc Porém, há um problema aqui: a adição d...

wp2shell-scan

wp2shell-scan Um scanner e kit de prova de conceito para a CVE-2026-63030 wp2shell, uma vulnerabilidade de execução remota de código pré-autenticada no núcleo do WordPress Funcionalidades Dois métodos de detecção não destrutivos: --check-type time-based temporização SLEEP e --check-type error-bas...

Ultimate-wp2shell

WP2Shell – Prova de Conceito Prova de Conceito PoC educacional e defensiva para validar a exposição às vulnerabilidades do WordPress Core CVE-2026-60137 e CVE-2026-63030 WP2Shell. Visão Geral Este repositório fornece uma prova de conceito de detecção e validação defensiva para as vulnerabilidades...

cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RCE-Kette Entdecker: Searchlight Cyber via GPT-5.6 Sol Schweregrad: Kritisch — CVSS 9.8 CVE-2026-63030, CVSS 9.1 CVE-2026-60137 Status: Aktiv ausgenutzt — zu CISA KEV hinzugefügt Alias: "wp2shell" Übersicht Dies ist eine nicht...

CVE-2026-60137-With-Skip-SSL

CVE-2026-60137-With-Skip-SSL Ajout de --insecure pour ignorer SSL Original-without-skip-ssl : https://github.com/ZephrFish/wp2shell-scanner...

wp2shell-scanner

wp2shell-Scanner Erkennungs- und Validierungswerkzeuge für die WordPress-Core-Exposition gegenüber wp2shell CVE-2026-63030 / CVE-2026-60137. Die Modi werden mit einem Flag ausgewählt, und das Ziel ist positionsabhängig. --scan nimmt einen Fingerabdruck der Core-Version und bestätigt, dass die RES...

wordpress-skelersecurity-core-security-CVE-2026-63030

Plugin di Sicurezza Core SkelerSecurity Una mitigazione temporanea e mirata per l'accesso non autenticato all'endpoint REST Batch API di WordPress Core. Panoramica Plugin di Sicurezza Core SkelerSecurity richiede l'autenticazione prima che WordPress elabori le richieste all'endpoint Core REST Bat...

wp2shell-vulnerability-scanner

WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Panoramica WP2Shell Scanner è un'utilità bash che ricerca ricorsivamente un albero di directory per installazioni WordPress e verifica se ciascun sito esegue...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Mitigazione temporanea di emergenza per CVE-2026-60137 e CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 Descrizione in Inglese Questo plugin leggero per WordPress funge da patch virtuale temporanea mitigazione contro la catena...

wp2shell-scanner

wp2Shell Scanner – mit PoC CVE-2026-63030 und CVE-2026-60137 – Scanner für die WordPress-wp2shell-Schwachstellenkette Autorisiertes Sicherheitsforschungstool mit optionalem Befehlsverifizierungs-PoC. wp2shell-scanner erkennt die WordPress-wp2shell-Schwachstellenkette, indem es öffentliche...

Wp2shell-ioc-scanner

=== wp2shell IOC Scanner === Collaboratori: michaelkanda URI autore: https://designare.at URI plugin: https://designare.at Tag: security, incident-response, wordpress, shadow-admin, ioc Richiede almeno: 6.0 Testato fino a: 7.0 Richiede PHP: 7.4 Versione stabile: 1.3.1 Licenza: GPLv2 o successive...

EXPLOIT-CVE-2026-63030

Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Ambiente Docker volutamente vulnerabile con WordPress Core 7.0.1 e un exploit in Python che dimostra la catena pre-autenticazione wp2shell :...

wp2shell-detect

wp2shell-detect Blackbox, rilevatore non intrusivo per wp2shell — la catena RCE pre-autenticazione nel core di WordPress divulgata il 2026-07-17: CVE-2026-63030 — confusione di route nell'endpoint REST batch /wp-json/batch/v1: una sub-request il cui percorso fa fallire wpparseurl finisce nell'arr...

wp2shell_scanner

wp2shellscanner हाल की WordPress कोर भेद्यताओं के लिए गैर-आक्रामक डिटेक्शन स्कैनर — जिसमें wp2shell प्री-ऑथेंटिकेशन RCE श्रृंखला भी शामिल है। wp2shellscanner.py किसी WordPress साइट के कोर संस्करण का फ़िंगरप्रिंट लेता है और उसकी सार्वजनिक रूप से विज्ञापित REST API सतह को पढ़ता है, फिर प्रत्येक ट्र...

CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137...

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

wp2shell-scanner

wp2shell-scanner von@bahartanir katherinepierce Fork von ZephrFish/wp2shell-scanner mit zusätzlichen Verbesserungen. Forschung von Adam Kues Assetnote und Mustafa Can İPEKÇİ nukedx. Erkennungs- und Validierungswerkzeuge für die Offenlegung des WordPress-Kerns gegenüber wp2shell CVE-2026-63030 /...