> TritonInfoSec News
Home / Jul 21, 2026 / Story
0
#3 Dark Reading general July 20, 2026 at 21:38 UTC

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

By Jai Vijayan

AI Summary

Attackers began chaining CVE-2026-60137 and CVE-2026-63030 (dubbed 'WP2Shell') within three days of disclosure to target millions of WordPress sites with remote takeover attempts. The rapid weaponization against one of the internet's largest attack surfaces demands immediate patching for any WordPress installation running the affected components.

Read full article → https://www.darkreading.com/cyberattacks-data-brea…

Relevance score: 86.0/100

# More from July 21

  1. 1
    SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access The Hacker News
  2. 2
    Critical ServiceNow code execution flaw now exploited in attacks BleepingComputer
  3. 4
    Hugging Face discloses breach linked to autonomous AI agent BleepingComputer
  4. 5
    Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine The Hacker News
  5. 6
    UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware The Hacker News
  6. 7
    FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware The Hacker News
  7. 8
    SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines The Hacker News
  8. 9
    Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution The Hacker News
  9. 10
    New HollowGraph malware uses Microsoft Graph for stealthy C2 comms BleepingComputer