WP2Shell RCE
FortiGuard Labs continues to detect exploitation attempts targeting the WP2Shell attack chain (CVE-2026-63030 and CVE-2026-60137), a critical unauthenticated remote code execution (RCE) vulnerability affecting WordPress Core. Telemetry collected over the past seven days shows the highest volume of blocked attacks originating from or targeting Poland, Australia, Japan, the United States, and Turkey.
Read at FortiGuard Outbreak Alerts
- Vendor
- Fortinet
- Product
- WordPress core
- Exposure class
- Web platform
Why it ranks 25 (Notable)
- Product class: web platform
- Covered by 4 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- FortiGuard Outbreak Alerts (fortiguard.fortinet.com)
- CVE-2026-63030 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-60137 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.