MEDIUMVulnerability
Global

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

·Source: The Hacker News

Updated:

Executive Summary

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system. Adam Kues at Assetnote, Searchlight Cyber's attack surface management arm, found the flaw and reported

Analysis

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system. Adam Kues at Assetnote, Searchlight Cyber's attack surface management arm, found the flaw and reported
Source Attribution

Originally published by The Hacker News on Jul 17, 2026.

Related Threats

LOWVulnerability

Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. [...]

BleepingComputer
CRITICALVulnerability

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. [...]

BleepingComputer
MEDIUMVulnerability

Kimi K3 Highlights Limits of AI Benchmark Leaderboards

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/kimi-k3-highlights-limits-ai-benchmark-leaderboards-image_small-1-a-32264.jpg" align=right hspace=4><b>Open-source model impresses on tests but enterprise performance remains unproven</b><br>Moonshot AI's Kimi K3 has climbed AI benchmark leaderboards and challenged leading U.S. models on coding tasks. But benchmark scores offer on

Bank Info Security