CVE-2026-63030 - Geek Feed

Critical wp2shell WordPress flaws exploited to install webshells

July 24, 2026July 24, 2026 geekfeed0Tagged Actively Exploited, CVE-2026-60137, CVE-2026-63030, Exploit Chain, Plugin, vulnerability, Web Shell, wordpress, WP2Shell

Hackers are exploiting the “wp2shell” critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. The critical exploit chain abuses the WordPress REST API’s batch-processing feature, allowing remote attackers to execute code on vulnerable installations without the need to authenticate. Although the technical details were not released, […]

3 mins read

WordPress Core “wp2shell” RCE flaws get public exploits, patch now

July 21, 2026July 21, 2026 geekfeed0Tagged CVE-2026-60137, CVE-2026-63030, Exploit Chain, Public PoC, Remote Code Execution, vulnerability, wordpress, WordPress exploit, WordPress RCE, WordPress shell upload, WP2Shell

Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. The wp2shell attack consists of two flaws, tracked as CVE-2026-63030 and CVE-2026-60137, that can be chained together to achieve pre-authentication remote code execution against WordPress installs running versions 6.9.x and […]

4 mins read