CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
-
Updated
Oct 17, 2026 - Python
CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core
WordPress REST API SQLi to RCE PoC (CVE-2026-63030 & CVE-2026-60137)
Critical Wordpress to Shell (unauthenticated)
To associate your repository with the wp2shell-exploit topic, visit your repo's landing page and select "manage topics."