Critical wp2shell WordPress flaws exploited to install webshells

By Bill Toulas

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]

Read full article at BleepingComputer

More from BleepingComputer

Sandworm hackers target IT pros with trojanized WireGuard VPN client 5 hours ago Cisco warns of ASA and FTD VPN flaw exploited to crash devices 6 hours ago Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees 7 hours ago Microsoft releases Windows 10 KB5120249 extended security update 8 hours ago Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days 8 hours ago