> TritonInfoSec News
Home / Jul 19, 2026 / Story
0
#1 BleepingComputer general July 18, 2026 at 17:22 UTC

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

By Lawrence Abrams

AI Summary

Public exploits have been released for the critical 'wp2shell' remote code execution vulnerabilities in WordPress Core, dramatically raising the risk for the millions of sites running the platform. The availability of public exploit code means automated mass exploitation is likely imminent, making immediate patching non-negotiable for administrators.

Read full article → https://www.bleepingcomputer.com/news/security/wor…

Relevance score: 88.0/100

# More from July 19

  1. 2
    Update now: 7-Zip fixes RCE flaw exploitable with malicious archives BleepingComputer
  2. 3
    Fresh SharePoint Vulnerability Exploited Soon After Disclosure SecurityWeek
  3. 4
    Leading members of Scattered Spider sentenced in UK to 66 months in jail CyberScoop
  4. 5
    HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload BleepingComputer
  5. 6
    ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files The Hacker News
  6. 7
    Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT The Hacker News
  7. 8
    Ernst & Young discloses data breach after support system hack BleepingComputer
  8. 9
    New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage The Hacker News
  9. 10
    Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man The Hacker News