SEKurity GmbH Logo
Home / Tags / wp2shell

#wp2shell

1 Article tagged

[*] Filtering articles by tag: wp2shell
[+] Matching entries: 1
root@sekurity:~# ls -la /tags/wp2shell/* _

CVE Research
sekurity-team

InSEKurity of the Week (CW30/2026): WordPress Core wp2shell Pre-Auth RCE (CVE-2026-63030 & CVE-2026-60137)

A REST API batch-route confusion in WordPress Core chained with a WP_Query SQL injection gives unauthenticated attackers remote code execution on a default WordPress install -- no plugins, no credentials, and it is already being exploited in the wild.

01

root@sekurity:~# echo "End of results for tag: wp2shell"
End of results for tag: wp2shell
root@sekurity:~# _