Sec Feed Reader

CVE-2026-60137

Kenndaten

CVE.org (extern): Record bei CVE.org oeffnen
CVSS (CVE.org): 9.1
EPSS (FIRST): Score 0.05323000000, Perzentil 0.92534000000
EPSS-Stand: 2026-10-21 10:27 UTC
Veroeffentlicht (CVE.org): 2026-07-17
Zuletzt angereichert: 2026-10-20 22:46 UTC
Externe Referenzen (Anzahl): 182
Anreicherungs-Plugins (Referenzen): github_poc, sploitus
CVSS (Quelle / verkn. Eintraege): 9.8 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Eintraege mit Bezug zu CVE-2026-60137

Veroeffentlicht	Quelle	Titel	Severity	Kategorie
2026-07-24 09:00	cert_bund	[UPDATE] [kritisch] WordPress: Mehrere Schwachstellen ermöglichen Codeausführung	CRITICAL	government_cert
2026-07-21 16:41	bleeping_c	Critical wp2shell WordPress flaws exploited to install webshells	CRITICAL	security_news
2026-07-21 08:59	thn_global	WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning	CRITICAL	security_news
2026-07-21 00:00	cisa_kev	CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability	CRITICAL	threat_intel
2026-07-21 00:00	cisa_kev	CVE-2026-60137 — WordPress Core SQL Injection Vulnerability	CRITICAL	threat_intel
2026-07-20 12:05	bsi_csw	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	CRITICAL	government_cert

Externe Referenzen zu CVE-2026-60137

Bezeichnung	Typ	Entry	Quelle
GitHub 0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub 0xMarcio/pocindex: Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub 0xh7ml/CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub 0xjessie21/wp2shell-checker: WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub 4B3R4M4-607D/CVE-2026-63030-POC: CVE-2026-63030 / wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub AC-DAC/Mothership-Public: Mothership is a self-hosted, centralised management dashboard for over 15 WordPress client sites, built on MainWP and de	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ARPSyndicate/cve-scores: EPSS & VEDAS Score Aggregator for CVEs	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC: Non-destructive proof-of-concept and verification harness for CVE-2026-60137, a blind SQL injection in WordPress core (`	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub AdarshThakur14777-cyber/CVE-2026-60137: wpsqli full SQLi extractor + dumper for CVE-2026-60137	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub AdnaneKhan/Wp2Shell-RCE: PoC Repository with Lab Setup for Wp2Shell RCE	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Adrees-Basheer/wp2shell-vulnerability-scanner: Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub AnggaTechI/CVE-2026-63030: WordPress Core Pre-Auth RCE — Batch Route Confusion + SQL Injection	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub BIBILZERODAY/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Bhanunamikaze/WP2Shell-CVE-2026-63030-POC: PoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub BlueShield-Ch4rl13/ScriptNewsCTI: Panel de ciberamenazas que se actualiza solo: nuevas amenazas y vulnerabilidades activas cada 6 horas.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub BytesPulse-OE/wp2shell-Hestia-Scanner: Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Byungju/cve-research-lab: 주요 CVE 분석	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ChPratik/Threat_intelligence_Portfolio: End-to-end technical analysis and reproduction notes for high-impact CVEs (e.g., pre-auth RCEs, sandbox escapes, and pri	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Colere-Sys/wp2shell-poc: Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Crypto-Cat/wp2shell: PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub CryptoGenNepal/CVE-KEV-RSS: CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild and CryptoGen Nepal aims	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub DeadExpl0it/wp2shell-poc	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub DevGreick/devgreick	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Dungsocool/CVE-2026-60137-CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Dungsocool/CVE-2026-60137_CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Edu34061284/wptest: wordpress Schwachstelle	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub GMJayy/wp-cve-poc	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub GhostInExile/CVE-2026-63030-Wp2Shell: WordPress REST API SQLi to RCE (CVE-2026-63030)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub GhostTroops/TOP: TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Giangdurian/CVE-2026-63030-CVE-2026-60137	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub INFOKOM-KI/wp2shell-wazuh: WP2Shell Detection For Wazuh SIEM	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub JohenLastGen-JLG/wp2shell: wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub K52-ai/CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub K52-ai/wp2shell: wp batch route exploitation toolkit CVE 2026-63030+CVE 2026-60137	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Ka01nq/WpScc	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Lukols-Dev/wp-cve-2026-63030-check: Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub M4xSec/wp2shell-Exploit-Waf-Bypass: WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass \| CVE-2026-63030 + CVE-2026-60137 \| Go + Python + Metasploit modul	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub M4xSec/wp2shell-lab	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub MRdark-ops/ProofCMS-: DAST tool to check if a given Wordpress/Joomla application is vulnerable or not, with built-in exploits.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-: Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a Word	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub MangelZabalaDevelop/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub MataKucing-OFC/NemesisV3: RedTeam Tools	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub MatterSolutions/wp2shell-check: A single read-only script that answers the two questions that matter after the wp2shell WordPress core vulnerability	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Mr-xn/Penetration_Testing_POC: 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub NONAME-ELV/elv-wp2shell: Founder E.L.V Engine	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub OffByOn3/CVE-2026-63030-Wp2Shell: WordPress REST API SQLi to RCE (CVE-2026-63030)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub OffByOn3/wp2shell-poc: WordPress REST API SQLi to RCE (CVE-2026-63030)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Oraink-News/tech-digest: 灵砚 Oraink 公开科技互联网日报/周报归档，汇聚公众号、推特、博客、Newsletter 等优质创作者与一线团队文章。	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Ostorlab/KEV: Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsu	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Red-Fern/fail2ban-wp2shell: Repo for fail2ban filter for the wp2shell exploit	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub RicheByte/cyberNews	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub SaltyHash8334/server: Pearl homeserver administration guide	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Sec-Dan/WP2Shell-Scanner: Read-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub SentinelXofficial/sxwp2shell: WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Thanfees/web2shell_auto	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Threekiii/CVE: 一个 CVE 漏洞预警知识库，无 exp/poc，部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub TranDongA3/POC-CVE-2026-63030-CVE-2026-60137-	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Triotion/WP-Scanner: Wordpress Security Scanner && Auto Exploiter	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub Vr00mm/honeypot-writeup	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub WPGuard-ai/wp2shell-check: A single read-only script that answers the two questions that matter after the wp2shell WordPress core vulnerability	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub WhiteK0T/Base-of-knowledge	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub YYX1000/vullab: 使用docker对漏洞环境进行复现	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ZenithGenius/wordpress-batch-rce-lab: CVE-2026-63030: WordPress REST batch-endpoint array desync. Mechanism, detection, mitigation, and a safe reproduction la	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ZephrFish/wp2shell-scanner: CVE-2026-63030, CVE-2026-60137, wp2shell scanner	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub advision-development/wordpress-malware-quick-scan: Non-remediating WordPress malware scanner. Reports suspicious files, core integrity drift and campaign indicators for ma	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub aespasa/wp2shell-fixer	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub allannjuguna/Wp2Shell: Proof-of-concept for an unauthenticated SQL injection in WordPress core that is chainable to remote code execution, via	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub alltrad3s/ratsweepr	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ananay/wp2shell-lab: Validation target: minimal WordPress core slice reproducing the wp2shell (CVE-2026-63030 + CVE-2026-60137) REST-to-SQLi	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub anxkhn/my-awesome-stars	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ark0-nights/cve_exps	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub arvindear/wp2shell-PoC: CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub b1bek/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub bahartanir/wp2shell-scanner: CVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub barmi/cve-patch-auditor: Audit CVE impact, patch status, remediation progress, and verification results across systems.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub beuningenit/wp2shell-fix: A tool that attacks the recent WP 2 Shell bug within WordPress.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub c0gnit00/Wp2Shell: Exploit POC for Wp2Shell, CVE-2026-63030 + CVE-2026-63137	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub codeb0ssx/Ultimate-wp2shell: wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub createdbyray/CybersecurityLabs: My experience with running/exploiting virtual machines intended for red/blue team + malware anaylsis.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub cx0110/OssTrending	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub dany547/adc-core-security: Basic Wordpress Security plugin	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub derealkello011-ui/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub dinosn/wp2shell-lab: Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 autho	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ebrasha/abdal-cve-2026-60137: Abdal CVE-2026-60137 is an advanced WordPress security scanner for identifying systems potentially affected by the CVE-2	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ebrasha/abdal-cve-2026-63030: Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 thr	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub edenzaraf/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ekomsSavior/wp2shell: CVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub elonma-china/wp2shell-lab	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub emaag/course-discovery	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub enhansome/enhansome-web-hacking	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub exploitcartel/bank-of-cyber	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub exploitcartel/bank-of-cyber-v2	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub exploitmatic/exploitmatic	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub exploitmatic/solutions	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub eyesecurity/wp2shell-compromise-scanner-plugin: Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub fkie-cad/nvd-json-data-feeds: Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API bu	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub fl0ydsec/CVE-2026-63030: WP2Shell - CVE-2026-63030 + CVE-2026-60137 WordPress Core pre-auth RCE mass exploit	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub fl0ydsec/fl0ydsec: FloydRoot	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub g0d150ne/WP2Shell: WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-6303	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc: CVE-2026-63030 & CVE-2026-60137 Wp2shell Poc	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub gichirimaku/wp2shell-PoC: CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub giterlizzi/secdb-feeds: SecDB - Security Feeds	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub h00die/vulnerable_docker_images: This repo is some work just to make vulnerable docker images so I have a target network	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub harezadmm/omp-enhanced: OMP Enhanced Client v2.0.0 - Multi-model fallback, prompt templates, caching	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub hidden-investigations/wp2shell-scanner: WordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional Po	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub hitechcloud-vietnam/wp2shell-PoC: CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ikow/wp2shell: wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub infoslack/awesome-web-hacking: A list of web application security	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub interim-embryoniccell971/wp2shell-Exploit-Waf-Bypass: Exploit WordPress pre-auth RCE vulnerabilities with automated WAF bypass to gain unauthenticated shell access.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ivanesk315/CVE-2026-60137-and-CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub jazzsequence/wp2shell-version-audit: Checks all of your Pantheon sites for versions of WordPress affected by the wp2shell vulnerability	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub jed-parsec/CVE-2026-63030-60137-wp2shell-lab: Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a Word	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub joaovicdev/EXPLOIT-CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub johnlodan/wp2shell-rce: WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub jpremchander/dskeeper: to keep up the GitHub contributions	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub kato83/vuln-zoo: A catalog of named/branded security vulnerabilities with CVE cross-references, structured JSON data, and year-by-year ti	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub kekewater/kanban-board: 小墨项目看板	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub killvxk/gitweekly: 收集各种有趣的github项目	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub koayxinchun4-cmd/github-trending-daily: GitHub Trending 每日自动更新 — 三日涨星热榜，保留完整历史记录	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub kopernix/WP2Shell-Vax: Repositorio nuevo para WP2Shell-Vax	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub kopernix/WPShellVax: Mitigación temporal para la cadena wp2shell de WordPress mediante protección del endpoint REST /batch/v1.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub langz337/CVE-2026-63030	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub lanyz1/TGSEC-Qtzuu: TGSEC社区渗透套件 · 2026-09-23：cvebird最优9 harness + CVE独立仓差分 + 锁面。按攻击面组织，可喂给AI	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub lgturatti/techdrops: News about technology and digital stuff	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub lucifer0xf/wp2shell-Wordpress-TOWN: Unauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub manarul04/smartlog-center	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub manpisetsu/wp2shell: CVE-2026-63030 + CVE-2026-60137 exploit RCE chain	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub marc-ko/daily-trending-repo: This repo will give you the latest trending repo on github and giving you a grasp by sending email via Github Watching F	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub maux339-cpu/exploits: HUB canônico unificado: AI/redteam pentest (submodules) + OSINT + DeFi skills. Lab/autorizado only. Não é dump de payloa	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub mcipekci/wp2shell: Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub mhassani97/cve-2026-63030-lab: wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub michael-kanda/Wp2shell-ioc-scanner: Defensive WordPress incident-response plugin for the "wp2shell" attack chain (CVE-2026-60137 / CVE-2026-63030): detects	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub mrmtwoj/Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress: CVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub muhammadfaraz800/wp2shell_verify: If you have a list of wordpress domains and want to automate to check if the domains are vulnerable to wp2shell this scr	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub mverschu/CVE-2026-63030: PoC Exploit of WordPress Core Unauthenticated RCE known as WP2Shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub myseq/tracker: Security Tracker	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub node011/wp2shell: Vibe Coded wp2shell with IBM BOB	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub northsia/CVE-2026-60137-With-Skip-SSL: Adding --insecure to skip ssl	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub orgito1015/wb2shell-scanner	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub own2pwn-fr/wp2shell-detect: Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub pantheon-systems-ps/wp2shell-audit	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub pantheon-systems-ps/wp2shell-cleanup	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub pantheon-systems-ps/wp2shell-version-audit: Checks all of your Pantheon sites for versions of WordPress affected by the wp2shell vulnerability	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub pedroMPMartins/wordpress_exploit	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub purwocode/purwocode	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub pxawtyy/proofcms: A DAST tool to check if a given Wordpress/Joomla application is vulnerable or not, with built-in exploits.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub qianqiusujiu/cve	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub razureink/cve-2026-63030_60137-wordpress_rce_reproduction: CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub rechandra/wp2exp-2026: WordPress All-in-One Exploit Framework — detector, scanner, enumerator, exploit, escalation. 10 CVEs from the 2026-08 wa	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub rybaz/wp2shell-research	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub sahmsec/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub saretawa/wp2blind	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub securelayer7/WordPresShell: Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub sheamm1/Vulnerable-Wordpress-Lab	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub shendewa849/wp2shell-sniper: WP2Shell Sniper - Pre-auth WordPress admin creator	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub shinthink/CVE-2026-63030: WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030: The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub sowarma/wp2shell-PoC: CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub srkyn/kev-prioritization-notes	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub tcyph3r/wp2shell-cve-2026-63030-root-cause	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub theendofabbys/wp2shell-rce	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub tislars/wp2shell-check	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub tpcybersec/VulnBox	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub trungdo206/wp2shell-ctf	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub ul0gic/corrode: High-performance security scanner for finding exposed credentials, secrets, and vulnerabilities in web applications	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub vithanhlam/codewp-shield-monitor: CodeWP Shield Monitor (ShieldPress) — WordPress security plugin	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub vuav/vuav	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub vulnquest58/PressVector: PressVector - Advanced WordPress Vulnerability Scanner CVE-2026-63030 (REST batch route confusion) / CVE-2026-60137 (SQL	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub w00tzenheimer/feed: An auto updating feed based on the folks I follow in case I miss something.	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub w4zu/Debian_security: DSA and DLA for Debian last 14 days	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub webpro255/awesome-ai-agent-attacks: A curated timeline of real AI agent security incidents, breaches, and vulnerabilities (2024-2026). Every entry sourced a	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub wn-iqbal/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yoerivegt/wp2shell-poc: wp2shell (CVE-2026-60137 / CVE-2026-63030)	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yogaGymn/wp2shell	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yottajunaid/cyber-news-bot: Automated daily cybersecurity news fetcher powered by GitHub Actions	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yuag/wp2shell: CVE-2026-63030 + CVE-2026-60137+poc	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yung-megafone/starred: A dynamically generated and organized list of repositories I've starred on GitHub	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub yyy123123907/wp2shell: WP2Shell 漏洞验证 PoC，用于 WordPress 安全研究、漏洞分析及授权环境下的安全检测。	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub zi3lak/wp2shell_scanner: Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detecti	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
GitHub zulloper/cve-poc: CVE POC repo 자동 수집기	POC	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	github_poc
Sploitus: Exploit for CVE-2026-60137	EXPLOIT	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	sploitus
Sploitus: Exploit for CVE-2026-60137	EXPLOIT	Version 1.1: WordPress - Schwachstellen erlauben Remote Code Execution	sploitus

Alle CVEs