CyberShieldAlerts
Hacking News·1 min read

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a working proof-of-concept is public. The story bel

CS
CyberShield Team
2026-07-17
Share:
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a working proof-of-concept is public. The story below reflects all of it. An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until

Tags

#cybersecurity#news
Share:

Join the Discussion

Comments coming soon. Follow us on social media for real-time discussions.

Related Articles

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Hacking News
1 min read

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager

CyberShield TeamRead More
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
Hacking News
1 min read

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahe

CyberShield TeamRead More
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Hacking News
1 min read

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under a

CyberShield TeamRead More
← Previous

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Next →

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens