Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
New wp2shell RCE Vulnerability Hits Millions of WordPress Sites, Emergency Patch Released

A critical pre-authentication remote code execution (RCE) vulnerability dubbed “wp2shell” has been discovered in WordPress Core, putting an estimated 500 million+ websites at risk of full takeover by unauthenticated attackers. Security researcher Adam Kues of Searchlight Cyber’s Assetnote research team uncovered the flaw, which stems from a REST API batch-route confusion issue that leads to […] The post New wp2shell RCE Vulnerability Hits Millions of WordPress Sites, Emergency Patch Released appeared first on Cyber Security News.
A critical pre-authentication remote code execution (RCE) vulnerability dubbed “wp2shell” has been discovered in WordPress Core, putting an estimated 500 million+ websites at risk of full takeover by unauthenticated attackers. Security researcher Adam Kues of Searchlight Cyber’s Assetnote research team uncovered the flaw,…
Excerpt shown under the publisher's RSS terms · 43 words · full text and figures are on the publisher's site
Related coverage

What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window
Cybersecurity News · Aug 22, 2026

Weekly Cyber Security Newsletter Bulletin – EY Breach, Wpzshell Exploit, Notepad++ Flaws +20 Stories
Cybersecurity News · Jul 19, 2026

Critical wp2shell RCE Vulnerability – Complete Coverage Including PoC and Active Exploitation Details
Cybersecurity News · Jul 20, 2026
Problems of Proliferation
LessWrong · Sep 29, 2026