Security Blog

Insights, techniques, and best practices from our cybersecurity experts. Stay updated with the latest trends and methodologies in security.

Threat Intelligence
25 July 2026
11 min read

wp2shell: the WordPress core RCE, and what to do about it

CVE-2026-63030 and CVE-2026-60137 chain into pre-authentication remote code execution against a stock WordPress install. Who is affected, how to check whether you were already hit, and why patching alone is not remediation.

WordPressRCEIncident Response
Read more

Categories