OP 21 July, 2026 - 06:49 PM
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Key facts
Source: Dark Reading
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Key facts
- CVEs: CVE-2026-60137, CVE-2026-63030
- Affects: WordPress
Source: Dark Reading
![[Image: rep.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.postimg.cc%2FwxnXnxmk%2Frep.gif)
![[Image: h9Ab7uN.png]](https://i.imgur.com/h9Ab7uN.png)