elastic.co Jul 23, 2026

WordPress Pre-Auth RCE Chain wp2shell (CVE-2026-63030, CVE-2026-60137): Detection and IOCs

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full article requires sign-in

Access weekly reports, audio discussions, threat analysis, and CVE breakdowns.

Related CVEs

CVE-2026-60137 CVE-2026-63030

More Coverage

wiz.io CVE-2026-63030 & CVE-2026-60137: wp2shell Pre-Auth RCE Chain Actively Exploited in WordPress Core

Jul 20, 2026

github.com/Icex0 WordPress REST Batch Route Confusion Enables Pre-Auth SQLi-to-RCE Chain (CVE-2026-63030, CVE-2026-60137)

Jul 20, 2026

vuln.today Critical RCE in WordPress 6.9.x/7.0.x via REST API & SQL Injection - CVE-2026-63030

Jul 18, 2026

vuln.today Critical SQL Injection in WordPress Core WP_Query - CVE-2026-60137

Jul 18, 2026