{"uuid": "1ecac0b1-7bbf-46f6-9be6-8b8da2274cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63030", "type": "seen", "source": "https://t.me/pphm_HackerNews/2148", "content": "\ud83d\udd34 WP2Shell WordPress Vulnerabilities Exploited in the Wild\n\nTwo newly patched WordPress vulnerabilities are being exploited in the wild, with attacks beginning shortly after they came to light. \n\nThe vulnerabilities have been dubbed WP2Shell and they are officially tracked as CVE-2026-60137 and CVE-2026-63030. \n\nAccording to Searchlight Cyber, whose researchers discovered the flaws, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are affected. \n\n\u201cThe attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins,\u201d the security firm warned.", "creation_timestamp": "2026-08-22T00:00:12.019653Z"}