Chisato · · 5 min read wp2shell: Pre-Auth RCE in WordPress Core (Patch Now)
wp2shell chains two WordPress core bugs into unauthenticated RCE on default installs. What CVE-2026-60137 and CVE-2026-63030 do, who's affected, how to patch.
#Security
#WordPress
#Web Development