HomeAI · summaries
Storia in 9 fonti
Attackers pummel critical WordPress vuln to create all sorts of mischief
Plus dozens of PoCs in the public domain
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
bleepingcomputer.com
WordPress Core "wp2shell" RCE flaws get public exploits, patch now
Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their…
- ·
dev.to
wp2shell: how a route confusion + a reachable SQLi become pre-auth RCE in WordPress core
This is a republication. The original and always up to date version lives...
- ·
heise.de
wp2shell: Critical WordPress vulnerability allows code injection via API
By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.
- ·
securityweek.com
WP2Shell WordPress Vulnerabilities Exploited in the Wild
In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.
- ·
thehackernews.com
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding attention.
- ·
techcrunch.com
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk | TechCrunch
Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an estimate by a cybersecurity…
- ·
darkreading.com
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Attackers are chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
- ·
theregister.com
Attackers pummel critical WordPress vuln to create all sorts of mischief
Plus dozens of PoCs in the public domain
- ·
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and malicious plugins.
- ·
thenextweb.com
Hackers are mass-exploiting two WordPress vulnerabilities
Two patched WordPress vulnerabilities, chained as wp2shell, are under mass attack. AI helped find the flaw and weaponise it. Millions of sites may be exposed.