Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…
Intelligence View
⚡ tsecurity.de Intelligence
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Sicherheitslücken (CVE) GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
34 sources
Linux Kernel 7.3 Release is Good News For Gamers Short on VRAM
33 more sources
VVulDB Updates1 hour agoCVE-2026-98763 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 usb usb_disable_endpoint use after free (Nessus ID 367175) VVulDB Updates1 hour agoCVE-2026-98671 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 sun4i-gpadc-iio denial of service (Nessus ID 367174) VVulDB Updates1 hour agoCVE-2026-98814 | Linux Kernel up to 7.2.9/7.3-rc5 nvme nvme_command_effects use after free (Nessus ID 367172) VVulDB Updates1 hour agoCVE-2026-98843 | Linux Kernel up to 6.18.55/7.2.9/7.3-rc5 netfs netfs_read_gaps race condition (Nessus ID 367173) VVulDB Updates1 hour agoCVE-2026-98810 | Linux Kernel up to 7.2.9/7.3-rc5 mac80211 ieee80211_monitor_select_queue out-of-bounds (Nessus ID 367171) OOMG! Ubuntu!3 hours agoLinux 7.3 is out, speeds up ext4 and low-VRAM AMD GPUs
+27
11 sources
CVE-2026-92392 | curl up to 8.22.0 use after free (EUVD-2026-100915)
10 more sources
VVulDB Updates7 hours agoCVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management (EUVD-2026-103993) VVulDB Updates7 hours agoCVE-2026-97204 | Gitea up to 28.1.0 Labels authorization (EUVD-2026-103992) VVulDB Updates7 hours agoCVE-2026-110494 | Gitea up to 28.1.0 Attachment Linking information disclosure (EUVD-2026-103991) VVulDB Updates7 hours agoCVE-2026-110324 | Gitea up to 28.0.0 User Profiles privileges management (EUVD-2026-103990) VVulDB Updates7 hours agoCVE-2026-110311 | Gitea up to 28.1.0 Draft Release API information disclosure (EUVD-2026-103989) VVulDB Updates7 hours agoCVE-2026-107686 | Gitea up to 28.1.0 Web Handlers privileges management (EUVD-2026-103987)
+4
5 sources
Anthropic Announces 'Public Benefit Fund', Committing 5% of Its Shares
4 more sources
AArtificial intelligence3 hours agoAnthropic commits 5% of shares to ‘public benefit’ fund RSS«Hacker News» 🗞️🦾 IT BOLTWI…4 hours agoAnthropic schafft Public-Benefit-Fund: 5% Aktienstart, 20% Ziel TTechCrunch8 hours agoAnthropic says it’s committing 5% of its shares to a ‘public benefit fund’ TTechCrunch8 hours agoAnthropic says it’s committing 5% of its shares to a ‘public benefit fund’
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4278818/vulnerabilities-cve/critical-wordpress-flaws-allow-attackers-to-execute-remote-code-without-authentication/