WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

1 source

Attackers are actively exploiting two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve unauthenticated remote code execution on vulnerable sites using publicly available proof-of-concept exploits.

Reader briefpress 1 · 2

No reader reading of this story yet.

← Back to feed

cybersecurity1 source · 3h ago

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are actively exploiting two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve unauthenticated remote code execution on vulnerable sites using publicly available proof-of-concept exploits.

Affected◇ Ben Marr▪ Cloudflare▪ CMSmap▪ Germany◇ Gili Tikochinski▪ Indonesia▪ Intruder◇ Jake Knott▪ KEVIntel▪ Netherlands▪ OpenAI▪ Overlord RAT

Lens

No Reader read of this story yet.

Perspectives

The story's competing narratives, side by side — grouped by stance, with every outlet's origin and affiliation visible.

Perspective analysis pending — it generates as coverage from more origins arrives.

What to expect

First-order impacts with their likely second-order effects — direction and horizon per node.

Impact analysis pending.

Sources (1)

[1]The Hacker NewsWordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanningalarmist

Ask anything about this story — every answer cites this story's own sources, or says it can't.