WARPTECHNEWS · LAB

Home AI Business Tech Archive

Storia: WP2Shell WordPress Vulnerabilities Exploited in the Wild — Warptech Lab News

WARPTECH LAB NEWS

Warptech Lab News aggrega le notizie più rilevanti da oltre 700 fonti internazionali, con classificazione AI, TL;DR sintetici e timeline cluster su singole storie.

Navigazione

Home
Archivio
Editor's Brief
Cerca
Il tuo account
Newsletter tech/AI

Informazioni legali

Privacy Policy
Termini di servizio
Cookie Policy

© 2026 Sparktech S.R.L. — Tutti i diritti riservati. Sito gestito e manutenuto da Sparktech S.R.L.

Sede legale: Corso Libertà 55, 13100 Vercelli (VC), Italia · P.IVA / C.F. 02835910023 · Contatti: admin@warptechlab.com

Storia in 10 fonti

WP2Shell WordPress Vulnerabilities Exploited in the Wild

In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.

Raccontata da

thehackernews.com

bleepingcomputer.com

securityweek.com

darkreading.com

theregister.com

malwarebytes.com

cybersecurity360.it

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo1 mese fa

WP2Shell WordPress Vulnerabilities Exploited in the Wild

In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.

Timeline cronologica

venerdì 17 luglio 2026·thehackernews.com
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.
sabato 18 luglio 2026·heise.de
„wp2shell“: Kritische WordPress-Lücke erlaubt Codeeinschleusung über API
Durch Verkettung einer SQL-Injection- und einer API-Lücke können Angreifer Code einschleusen. WordPress hat ein Update veröffentlicht, die Finder einen Hotfix.

darkreading.com

1 mese fa

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Attackers are chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

Leggi questa versione → originale

thehackernews.com1 mese fa

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and malicious plugins.

Leggi questa versione → originale

bleepingcomputer.com1 mese fa

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers.

Leggi questa versione → originale

heise.de1 mese fa

wp2shell: Critical WordPress vulnerability allows code injection via API

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.

Leggi questa versione → originale

thenextweb.com1 mese fa

Hackers are mass-exploiting two WordPress vulnerabilities

Two patched WordPress vulnerabilities, chained as wp2shell, are under mass attack. AI helped find the flaw and weaponise it. Millions of sites may be exposed.

Leggi questa versione → originale

sabato 18 luglio 2026·

bleepingcomputer.com

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their…

domenica 19 luglio 2026·

dev.to

wp2shell: how a route confusion + a reachable SQLi become pre-auth RCE in WordPress core

This is a republication. The original and always up to date version lives...

domenica 19 luglio 2026·

heise.de

wp2shell: Critical WordPress vulnerability allows code injection via API

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.

lunedì 20 luglio 2026·

securityweek.com

WP2Shell WordPress Vulnerabilities Exploited in the Wild

In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.

lunedì 20 luglio 2026·

darkreading.com

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Attackers are chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

lunedì 20 luglio 2026·

theregister.com

Attackers pummel critical WordPress vuln to create all sorts of mischief

Plus dozens of PoCs in the public domain

martedì 21 luglio 2026·

thehackernews.com

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and malicious plugins.

martedì 21 luglio 2026·

thenextweb.com

Hackers are mass-exploiting two WordPress vulnerabilities

Two patched WordPress vulnerabilities, chained as wp2shell, are under mass attack. AI helped find the flaw and weaponise it. Millions of sites may be exposed.

martedì 21 luglio 2026·

heise.de

WordPress-Lücke „wp2shell“ wird angegriffen

Zum Wochenende wurde die „wp2shell“-WordPress-Lücke bekannt. Seitdem beobachten IT-Sicherheitsforscher Attacken im Internet darauf.

martedì 21 luglio 2026·

malwarebytes.com

What happens if you visit a WordPress site hacked through wp2shell?

Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk.

martedì 21 luglio 2026·

bleepingcomputer.com

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install…

mercoledì 22 luglio 2026·

cybersecurity360.it

Wp2shell, le vulnerabilità in WordPress: le patch sono urgenti, ma non bastano

Nel caso dell'attacco Wp2shell, le vulnerabilità si correggono con una patch. L’assenza di governance, invece, continua a produrre vittime: ecco perché non è sufficiente sanare le…

mercoledì 22 luglio 2026·

dev.to

How to Actually Protect Yourself From wp2shell (Not Just "Update WordPress")

Everyone's telling you the same thing right now: update WordPress. Which is, fine, yes, obviously but...