Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Install Web Shells Without Login
WP2Shell combines two WordPress Core flaws to move from an unauthenticated request to server-side code execution. It can let an attacker create an administrator account and install a plugin-based web shell. Seqrite’s October 16 analysis lists affected releases, but does not establish widespread live exploitation. The report says the flaws were disclosed in July 2026. […] The post WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Install Web Shells Without Login appeared first on Cyber Security News.
WP2Shell combines two WordPress Core flaws to move from an unauthenticated request to server-side code execution. It can let an attacker create an administrator account and install a plugin-based web shell. Seqrite’s October 16 analysis lists affected releases, but does not establish widespread live exploitation. The report says the flaws were disclosed in July 2026. The chain matters because it removes the login step. A public site…
Excerpt shown under the publisher's RSS terms · 67 words · full text and figures are on the publisher's site
Related coverage
New wp2shell RCE Vulnerability Hits Millions of WordPress Sites, Emergency Patch Released
Cybersecurity News · Jul 18, 2026
Critical wp2shell RCE Vulnerability – Complete Coverage Including PoC and Active Exploitation Details
Cybersecurity News · Jul 20, 2026
Weekly Cyber Security Newsletter Bulletin – EY Breach, Wpzshell Exploit, Notepad++ Flaws +20 Stories
Cybersecurity News · Jul 19, 2026
What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window
Cybersecurity News · Aug 22, 2026