Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…
Intelligence View
⚡ tsecurity.de Intelligence
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
35 sources
CVE-2026-78669 | Go http HTTP 2 amplification (ID 847186 / EUVD-2026-95426)
34 more sources
VVulDB Updates2 hours agoCVE-2026-97031 | Google crypto tls up to 1.26.8/1.27.1 Packet amplification (EUVD-2026-95422 / Nessus ID 370347) VVulDB Updates1 hour agoCVE-2026-78392 | Link Library Plugin up to 7.9.5 on WordPress link cross site scripting (EUVD-2026-108018) VVulDB Updates1 hour agoCVE-2026-112832 | Cozymes Rootblox Plugin up to 1.0.6 on WordPress require file inclusion (EUVD-2026-108139) VVulDB Updates1 hour agoCVE-2026-111971 | Photo Engine Plugin up to 6.5.7 on WordPress Administrative Dashboard cross site scripting (EUVD-2026-108016) VVulDB Updates1 hour agoCVE-2026-111972 | Photo Engine Plugin up to 6.5.7 on WordPress authorization (EUVD-2026-108017) VVulDB Updates1 hour agoCVE-2026-112842 | Cozmoslabs Paid Member Subscriptions Plugin up to 3.1.2 on WordPress authorization (EUVD-2026-108138)
+28
9 sources
CVE-2026-96361 | Drupal Webform up to 6.2.12/6.3.1 cross site scripting (WID-SEC-2026-3554)
8 more sources
VVulDB Updates3 hours agoCVE-2026-96362 | Drupal Webform up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96364 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96363 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96366 | Drupal Webform Plugin up to 6.2.11/6.3.0 improper authorization (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96365 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96367 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554)
+2
6 sources
Towards a Post-Quantum Matrix Protocol: A Hybrid Design Adapted to the Brazilian Scenario
5 more sources
MMatrixdotorg1 hour agoMatrixdotorg: Towards a Post-Quantum Matrix Protocol: A Hybrid Design Adapted to the Brazilian Scenario CChaos Computer Club16 hours agoTowards a Post-Quantum Matrix Protocol: A Hybrid Design Adapted to the Brazilian Scenario (matrix-conf-2026) MMatrixdotorg3 hours agoMatrixdotorg: TI-Messenger goes Europe: Austrian healthcare adopts matrix protocol MMatrixdotorg3 hours agoMatrixdotorg: TI-Messenger goes Europe: Austrian healthcare adopts matrix protocol CChaos Computer Club16 hours agoTI-Messenger goes Europe: Austrian healthcare adopts matrix protocol (matrix-conf-2026)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4280840/ethical-hacking/critical-wordpress-flaws-allow-attackers-to-execute-remote-code-without-authentication/