Feed›Vulnerability›AI helped uncover WordPress ‘wp2shell’ RCE now exploited in ...
VulnerabilityCyber Insider
9.8 — CRITICAL

AI helped uncover WordPress ‘wp2shell’ RCE now exploited in attacks

📅 20 July 2026 at 15:43 UTC📰 Cyber InsiderView original source ↗
AI helped uncover WordPress ‘wp2shell’ RCE now exploited in attacks

The critical WordPress vulnerability chain known as “wp2shell” was discovered with substantial assistance from an AI model, which identified both the initial pre-authentication SQL injection and a complex path to remote code execution. Patchstack now says attackers are actively exploiting the flaws, increasing the urgency for administrators to confirm their sites are patched. Adam Kues, … The post AI helped uncover WordPress ‘wp2shell’ RCE now exploited in attacks appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

A critical WordPress vulnerability chain, 'wp2shell', has been discovered and is now being actively exploited by attackers, posing a significant risk to hundreds of millions of websites globally.

⚙️Technical Details
CVEs
CVE-2026-63030CVE-2026-60137
Affected Systems
WordPress core
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
🛡️Recommended Actions
1Update to version 7.0.2, 6.9.5, or 6.8.6 immediately
2Review newly created accounts and recently installed plugins
3Monitor web server logs and outbound connections for signs of compromise
📦Affected Products
WordPress core
🔐NVD Verified DataVERIFIED
CVE-2026-63030 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-436
CVE-2026-60137 ↗CVSS 5.9 — MEDIUM
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-89

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed