WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Security researchers report a surge in exploitation of a critical WordPress exploit chain dubbed "wp2shell," which combines an authentication bypass and unauthenticated RCE to yield full server compromise; a public proof-of-concept has triggered mass internet scanning and active exploitation at scale. The report details the attack chain, common post-exploitation activities (webshells, data theft, SEO spam, cryptomining), detection indicators, and recommended mitigations including immediate core/plugin updates, scanning for compromises, WAF deployment, and file-permission hardening.