MEDIUMVulnerability
Global

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

·Source: Dark Reading

Updated:

Executive Summary

Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

Analysis

Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

Indicators of Compromise (2)

CVE (2)
CVE-2026-60137
NVDMITRE CVE
CVE-2026-63030
NVDMITRE CVE
Source Attribution

Originally published by Dark Reading on Jul 20, 2026.

Related Threats

CRITICALVulnerabilityNEW

How AI-Driven Robotics Expands Industrial Cyber Risk

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/how-ai-driven-robotics-expands-industrial-cyber-risk-image_small-2-a-32303.jpg" align=right hspace=4><b>CEO: Connected Factories and Hospitals Expose Legacy OT Systems to Modern Threats</b><br>Claroty CEO Yaniv Vardi says physical AI will accelerate robotics and industrial automation while making cyber-physical security a strategi

Bank Info Security
MEDIUMVulnerabilityNEW

US Eyes Sanctions on Chinese AI Firms Over Distillation

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-eyes-sanctions-on-chinese-ai-firms-over-distillation-image_small-2-a-32302.jpg" align=right hspace=4><b>Treasury Secretary Says US Is Finding American Model 'Watermarks' in Chinese AI</b><br>Treasury Secretary Scott Bessent said the Trump administration will investigate whether Chinese AI systems were distilled from American mo

Bank Info Security
MEDIUMVulnerability

Upbound says hack caused $13 million in fraudulent Acima leases

The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]

BleepingComputer