{"uuid": "0be3e2c9-cc5f-44a2-9a05-1921ec347c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mrewqx2tps2o", "content": "wp2shell: unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137). No plugin needed. Patched July 17 (6.9.5/7.0.2), both CVEs now in CISA KEV. Check your version today.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/YAUNn\n\ud83c\udde9\ud83c\uddea zurl.co/mtIxP \n\n#CyberSecurity #WordPress #CISA", "creation_timestamp": "2026-07-24T08:30:04.150379Z"}