WP2Shell WordPress Vulnerabilities Exploited in the Wild

Monday, July 20, 2026 at 05:21 AM UTC·Source: SecurityWeek

Updated: Monday, July 20, 2026 at 06:00 AM UTC

Executive Summary

Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure. The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek .

Analysis

Indicators of Compromise (2)

CVE (2)

CVE-2026-60137

NVD MITRE CVE

CVE-2026-63030

NVD MITRE CVE

Source Attribution

Originally published by SecurityWeek on Jul 20, 2026.

Related Threats

MEDIUMVulnerabilityNEW

EU Huawei Ban Backlash Report Exaggerated, Says Critic

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/eu-huawei-ban-backlash-report-exaggerated-says-critic-image_small-8-a-32298.jpg" align=right hspace=4><b>GSMA Intelligence Says Ejecting Huawei Equipment Will Cost Up to 40B Euros</b><br>European mobile network operators would have to shell out as much as 40 billion euros - or $45.7 billion - in direct costs to kick high-risk supp

7m agoBank Info Security

MEDIUMVulnerability

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), impacts default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The disclosure comes as

CVE-2026-8933

1h agoThe Hacker News

MEDIUMVulnerability

French Parliament greenlights social media ban for under-15s

Both houses of the French Parliament voted to block social media access for children under 15, making France the first European country to enact a ban amid a broadening global crackdown.

1h agoThe Record