wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
-
Updated
Jul 20, 2026 - Python
#
wp2shell-poc
Here are 4 public repositories matching this topic...
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core
-
Updated
Jul 18, 2026 - Python
wp2shell - WordPress CVE-2026-63030 Exploit & Scanner
python wordpress exploit rce sql-injection security-tools vulnerability-scanner unauthenticated unauthenticated-rce wp2shell wp2shell-poc cve-2026-63030
-
Updated
Jul 18, 2026 - Python
Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.
-
Updated
Jul 18, 2026 - Python
Improve this page
Add a description, image, and links to the wp2shell-poc topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the wp2shell-poc topic, visit your repo's landing page and select "manage topics."