WordPress Core tizimida wp2shell nomi berilgan va masofadan turib kod bajarish (Pre-auth RCE) imkonini beruvchi juda xavfli zaifliklar zanjiri (CVE-2026-63030 va CVE-2026-60137) aniqlandi.
6.9.0 → 6.9.4 (Toʻliq RCE xavfi mavjud)
7.0.0 → 7.0.1 (Toʻliq RCE xavfi mavjud)
6.8.0 → 6.8.5 (SQL Injection zaifligi bor)
https://flawfence.com/blog/en/wp2shell-wordpress-rce-vulnerability-cve-2026-63030/
Flawfence
wp2shell (CVE-2026-63030): The Unauthenticated RCE Hitting the Heart of WordPress
wp2shell is a pre-auth RCE in WordPress Core (CVE-2026-63030 + CVE-2026-60137). How it works, affected versions, PoC, detection and remediation.
July 20, 2026 324 2
