HomeAI · summaries
Storia in 5 fonti
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.
Confronto fonti
5 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.
- ·
heise.de
„wp2shell“: Kritische WordPress-Lücke erlaubt Codeeinschleusung über API
Durch Verkettung einer SQL-Injection- und einer API-Lücke können Angreifer Code einschleusen. WordPress hat ein Update veröffentlicht, die Finder einen Hotfix.
- ·
bleepingcomputer.com
WordPress Core "wp2shell" RCE flaws get public exploits, patch now
Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their…
- ·
dev.to
wp2shell: how a route confusion + a reachable SQLi become pre-auth RCE in WordPress core
This is a republication. The original and always up to date version lives...
- ·
securityweek.com
WP2Shell WordPress Vulnerabilities Exploited in the Wild
In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.