Threat Intelligence
25 July 2026
11 min read
wp2shell: the WordPress core RCE, and what to do about it
CVE-2026-63030 and CVE-2026-60137 chain into pre-authentication remote code execution against a stock WordPress install. Who is affected, how to check whether you were already hit, and why patching alone is not remediation.
WordPressRCEIncident Response
Read more