Exploitation in the Wild of wp2shell

T1Critical 85Covered by 1 source · first reported by Wiz Research at 20 Jul, 18:00 UTC

Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core (CVE-2026-63030 & CVE-2026-60137). Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations.

security

Sources

• T1Exploitation in the Wild of wp2shellWiz Research20 Jul, 18:00

Vulnerabilities

• CVE-2026-63030
• CVE-2026-60137