← Back to feed
vendor Tenable Blog

wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core

Tenable Blog WordPress

An unauthenticated attacker can chain two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, to achieve remote code execution against affecte...

T1190 2 IOCs
Read the full story Tenable Blog →

Related Coverage

vendor ICYMI: August 2026 @AWS Security AWS Security Blog · Sep 23 vendor Reimagining the SOC for the agentic era in Microsoft Defender Microsoft Security Blog · Sep 23 vendor CISA BOD 26-04 Timelines for Three Linux Kernel CVEs Qualys Blog · Sep 23