wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
-
Updated
Jul 20, 2026 - Python
#
wp2shell
Here are 9 public repositories matching this topic...
Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1
-
Updated
Jul 19, 2026 - Python
wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7.0.0–7.0.1.
wordpress wordfence wordpress-core codeb0ss realcodeb0ss thecodeb0ss wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Jul 18, 2026 - Python
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core
-
Updated
Jul 18, 2026 - Python
wp2shell - WordPress CVE-2026-63030 Exploit & Scanner
python wordpress exploit rce sql-injection security-tools vulnerability-scanner unauthenticated unauthenticated-rce wp2shell wp2shell-poc cve-2026-63030
-
Updated
Jul 18, 2026 - Python
Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.
-
Updated
Jul 18, 2026 - Python
WordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.
penetration-testing security-scanner vulnerability-scanner wordpress-security-scanner wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Jul 20, 2026 - Python
Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 ("wp2shell"), a pre-authentication RCE chain in WordPress core.
-
Updated
Jul 18, 2026 - Python
Improve this page
Add a description, image, and links to the wp2shell topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the wp2shell topic, visit your repo's landing page and select "manage topics."