Tag

Cve 2026 63030

All articles tagged with #cve 2026 63030

technology1 month ago•3 min saved

Active wp2shell flaws unleash automated WordPress webshell attacks

Hackers are abusing two critical WordPress flaws (wp2shell: CVE-2026-63030 and CVE-2026-60137) via the REST API batch-processing feature to execute code without authentication, enabling installation of malicious plugins and PHP webshells. WordPress patched versions 7.0.2, 6.9.5, and 6.8.6 with automatic updates. Security firms report mass scanning, plugin-upload abuse, admin credential harvesting, local file inclusion attempts targeting wp-config, and rogue admin accounts. Admins should update, audit logs, inspect plugins, and check /wp-content/cache for suspicious files; dashboards show ~81.6% patch rate in a sample of 124k sites. No lateral movement or data exfiltration observed yet, but monitoring continues.

via BleepingComputer|

#cve-2026-63030 #rest-api #technology

security1 month ago•4 min saved

Public WordPress wp2shell Exploit Triggers Global RCE Wave

Attackers are abusing two flaws, CVE-2026-63030 and CVE-2026-60137 (wp2shell), to achieve unauthenticated remote code execution on stock WordPress installs. Public PoCs and AI-assisted tooling have spurred widespread scanning and exploitation, including admin account creation, malicious plugins, and web shells like CMSmap. While automatic updates and some WAF protections have reduced risk, many sites may remain unpatched; defenders should patch immediately and audit for indicators of compromise such as new admins and suspicious plugins.

via The Hacker News|

#cve-2026-60137 #cve-2026-63030 #remote-code-execution

technology1 month ago•5 min saved

Public PoCs Push Urgent Patch for WordPress wp2shell RCE

Public proof-of-concept exploits have surfaced for two chained WordPress Core flaws (CVE-2026-63030 and CVE-2026-60137) enabling unauthenticated remote code execution on WordPress 6.9.x and 7.0.x. WordPress released fixes in 6.9.5 and 7.0.2 with forced auto-updates; admins should patch immediately. Mitigations include blocking anonymous REST API access or specific endpoints, and Cloudflare has WAF protections. Tools like wp2shell.com let admins test vulnerability.

via BleepingComputer|

#cve-2026-60137 #cve-2026-63030 #rce

cyber-security1 month ago•24 min saved

Emergency Patch Rolled Out After wp2shell RCE Threat Targets WordPress

A critical, pre-authentication remote code execution flaw named wp2shell in WordPress Core affects roughly 500 million+ sites. It stems from a REST API batch-route confusion that enables unauthenticated attackers to execute code on vulnerable WordPress installations. The issue affects WordPress core versions 6.9.0–6.9.4, 7.0.0–7.0.1 (and 7.1 beta); fixes have been shipped in WordPress 7.0.2 with backports to 6.8.6 and 6.9.5. WordPress is auto-updating affected sites, and admins should update immediately. If patching isn’t possible yet, block anonymous REST API access or the batch endpoints as temporary mitigations and use the wp2shell.com scanner to check exposure.

via CyberSecurityNews|

#cve-2026-60137 #cve-2026-63030 #cyber-security