← Back to Feed
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
CVE-2026-63030CVE-2026-60137
July 20, 2026 · Dark Reading · Severity: HIGH
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Key Takeaways
- Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.