URL has been copied successfully!
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code


Tags: , , , ,

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable.Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system.Adam Kues at Assetnote, Searchlight Cyber’s attack surface management arm, found the flaw and reported

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. WordPress Plugin Vulnerability Exposes 3 Million Websites to Injection Attacks
  2. WordPress Plugin Flaw Exposes 40,000+ Websites to Cyber Attack
  3. Microsoft Issues Alert on ASP.NET Flaw Allowing HTTP Request Smuggling Attacks
  4. CISA Flags Linux Kernel Vulnerability as Threat Actors Launch Attacks