https://hackify.nl/en/blog/wp2shell-wordpress-core-rce/
wp2shell: critical pre-auth RCE in WordPress core (CVE-2026-63030 & CVE-2026-60137) | Hackify
Jul 18, 2026 - wp2shell (CVE-2026-63030 and CVE-2026-60137) is a pre-auth RCE in WordPress core. Read what is going on and how to secure your WordPress site now.