19th Jul 2026
WP2Shell | Wordpress Remote Code Execution Vulnerabilities, CVE-2026-60137 and CVE-2026-63030
On July 17th, Wordpress.org announced two new critical remote code execution (RCE) vulnerabilities known as WP2Shell. These vulnerabilities exist in core Wordpress files and allow an unauthenticated request to execute arbitrary code on the target website.
Customers running the Wordpress versions below are strongly advised to upgrade to latest ...
