WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-21 08:59 UTC
Importiert: 2026-07-27 13:10 UTC
CVSS: 9.8
Quelle-ID: thn_global
uid_hash: 75416b8376aac8d998f610af7a7b0fa26884471189b5bb11dd5fcde91ca07ff1

The Hacker News

Inhalt

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.

The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell.

"By the early hours of Saturday morning (UTC), successful exploitation was already well

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-60137	CRITICAL	9.8	CRITICAL	9.1	0.05323	0.92534	2026-07-17
CVE-2026-63030	CRITICAL	9.8	CRITICAL	9.8	0.10649	0.95769	2026-07-17

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste