CVE-2026-60137 - Geek Feed

Security
Tech News

WordPress Core “wp2shell” RCE flaws get public exploits, patch now

July 21, 2026July 21, 2026 geekfeed0Tagged CVE-2026-60137, CVE-2026-63030, Exploit Chain, Public PoC, Remote Code Execution, vulnerability, wordpress, WordPress exploit, WordPress RCE, WordPress shell upload, WP2Shell

Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. The wp2shell attack consists of two flaws, tracked as CVE-2026-63030 and CVE-2026-60137, that can be chained together to achieve pre-authentication remote code execution against WordPress installs running versions 6.9.x and […]

4 mins read