Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…
Intelligence View
⚡ tsecurity.de Intelligence
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
19 sources
CVE-2024-26685 | Linux Kernel up to 6.7.5 nilfs2 end_buffer_async_write race condition (Nessus ID 232182 / WID-SEC-2024-0773)
18 more sources
VVulDB Updates1 hour agoCVE-2024-26687 | Linux Kernel up to 6.1.80/6.6.18/6.7.5 Event Channel xen_irq_info_cleanup allocation of resources (Nessus ID 212350 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26688 | Linux Kernel up to 6.7.5 null pointer dereference (Nessus ID 239850 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26694 | Linux Kernel up to 6.6.17/6.7.5 iwlwifi double free (ab9d4bb9a189/d24eb9a27bea/353d321f63f7 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26693 | Linux Kernel up to 6.6.17/6.7.5 mvm iwl_mvm_is_dup denial of service (00f4eb31b819/c12f0f4d4caf/b7198383ef2d / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26695 | Linux Kernel up to 6.7.5 crypto __sev_platform_shutdown_locked null pointer dereference (WID-SEC-2024-0773) VVulDB Updates2 hours agoCVE-2026-63922 | Linux Kernel up to 7.0.11 IPv6 Exthdrs ip6_parse_tlv use after free (Nessus ID 367227)
+12
9 sources
CVE-2026-87621 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds write (EUVD-2026-74506 / Nessus ID 367215)
8 more sources
VVulDB Updates1 hour agoCVE-2026-87512 | Google Chrome up to 152.0.7977.82 ANGLE use after free (EUVD-2026-74486 / Nessus ID 367215) VVulDB Updates1 hour agoCVE-2026-87648 | Google Chrome up to 152.0.7977.82 ANGLE use after free (Nessus ID 367215) VVulDB Updates1 hour agoCVE-2026-87586 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds (Nessus ID 367215) VVulDB Updates1 hour agoCVE-2026-87604 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds (Nessus ID 367215) VVulDB Updates1 hour agoCVE-2026-91720 | Google Chrome up to 153.0.8010.36 ANGLE uninitialized pointer (Nessus ID 367215) VVulDB Updates2 hours agoCVE-2026-87596 | Google Chrome up to 152.0.7977.82 ANGLE out-of-bounds (Nessus ID 367215)
+2
6 sources
Elon Musk Says He Will Give a SpaceX Share to ‘Every Kid in America’
5 more sources
TThe Verge33 min. agoElon Musk promises to give one SpaceX share to every child in the US MMacDailyNews53 min. agoElon Musk pledges to give one SpaceX share to every American child next year — a gift worth roughly $10.5 billion CCaschys Blog2 hours agoSpaceX: Elon Musk will Aktien verschenken TTechCrunch2 hours agoMusk pledges to give ‘every kid in America’ one of his SpaceX shares TTechCrunch2 hours agoMusk pledges to give ‘every kid in America’ one of his SpaceX shares
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4278686/cyber-security-bulletins/critical-wordpress-flaws-allow-attackers-to-execute-remote-code-without-authentication/