Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code
Sat Jul 18 2026
Vulnerability
cyberpress.org
A critical pre-authentication remote code execution (RCE) vulnerability in WordPress Core, dubbed “wp2shell.” The flaw requires no preconditions and can be exploited by an anonymous attacker against a stock WordPress installation with zero plugins active, putting a significant chunk of the estimated 500 million WordPress-powered websites at immediate risk. Critical WordPress wp2shell Flaw The bug, […]
The post Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code appeared first on Cyber Security News.