WP2Shell RCE
ID: 85e11b98-263e-59ba-ad38-871ca092cd39
STIX ID: report--85e11b98-263e-59ba-ad38-871ca092cd39
Feed Name: FortiGuard Labs | FortiGuard Center - Outbreak Alerts
Threat Score
FortiGuard Labs reports active exploitation of the WP2Shell unauthenticated RCE in WordPress Core (CVE-2026-63030 and CVE-2026-60137), with public PoC code and telemetry showing tens of thousands of detections and thousands of blocked attempts; WordPress issued emergency updates (6.8.6, 6.9.5, 7.0.2) and agencies added the vulnerability to KEV — affected sites should remediate immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.