ThreatVectr
Tag

#wp2shell

3 stories taggedwp2shell.

Illustration: a darkened server room with a single glowing amber warning light reflected on rows of rack-mounted hardware
Vulnerabilities

Hackers Chain Two WordPress Bugs to Hijack Sites Without a Password

The flaw pair, nicknamed wp2shell, lets attackers take over vulnerable WordPress sites remotely. Mass scanning is already underway.

3 min read
A WordPress website dashboard under active attack, with visual indicators of exploit attempts and unauthorized commands being executed, warning panels and secur
Vulnerabilities

WP2Shell: Two WordPress Flaws Are Being Exploited Right Now, and Millions of Sites Are at Risk

A pair of newly patched security holes in WordPress are already being used in live attacks. No login required. No special setup needed. Just a vulnerable website.

3 min read
Illustration: a dimly lit server room aisle at night
Vulnerabilities

A WordPress Bug Lets Strangers Run Code on Your Site. No Login Required.

Every WordPress 6.9 and 7.0 site was exposed until a Friday emergency patch. The fix is being force-installed.

3 min read
© 2026 Threat Vectr