Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…
Intelligence View
⚡ tsecurity.de Intelligence
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Sicherheitslücken (CVE) GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
54 Quellen
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
53 weitere Quellen
VVulDB Updates6 uur geledenCVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444) VVulDB Updates6 uur geledenCVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444) VVulDB Updates6 uur geledenCVE-2026-90089 | Linux Kernel up to 6.18.51/7.2.5 btnxpuart nxp_process_fw_dump out-of-bounds (WID-SEC-2026-3444) VVulDB Updates6 uur geledenCVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444) VVulDB Updates6 uur geledenCVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444) VVulDB Updates6 uur geledenCVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444)
+47
29 Quellen
CVE-2023-29095 | David F. Carr RSVPMaker Plugin 10.5.5 on WordPress sql injection
28 weitere Quellen
VVulDB Updates7 uur geledenCVE-2026-114705 | QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress missing authentication (EUVD-2026-109263) VVulDB Updates7 uur geledenCVE-2026-114179 | wordplus BP Better Messages Plugin up to 3.1.3 on WordPress cross site scripting (EUVD-2026-109245) VVulDB Updates7 uur geledenCVE-2026-112844 | Arraytics Event Solution Plugin up to 4.1.26 on WordPress cross site scripting (EUVD-2026-109246) VVulDB Updates7 uur geledenCVE-2026-114194 | Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress cross site scripting (EUVD-2026-109261) VVulDB Updates7 uur geledenCVE-2026-112863 | Hogash KALLYAS Plugin up to 4.25.0 on WordPress cross site scripting (EUVD-2026-108942) VVulDB Updates7 uur geledenCVE-2026-87835 | Front End Users Plugin up to 3.2.35 on WordPress Registration access control (EUVD-2026-109230)
+22
15 Quellen
CVE-2026-100821 | Mozilla Firefox up to 115.41/140.16/153.3/156 Panning/Zooming isolation (Nessus ID 371697 / WID-SEC-2026-3654)
14 weitere Quellen
VVulDB Updates11 uur geledenCVE-2026-100790 | Mozilla Firefox up to 115.41/140.16/153.3/156 XSLT use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updates11 uur geledenCVE-2026-100788 | Mozilla Firefox up to 140.16/153.3/156 WebAssembly memory corruption (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updates10 uur geledenCVE-2026-100780 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM Core/HTML use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updates9 uur geledenCVE-2023-4050 | Mozilla Firefox up to 115.9 stack-based overflow (DLA 3521-1 / Nessus ID 239763) VVulDB Updates9 uur geledenCVE-2023-4052 | Mozilla Firefox up to 115.43.1 on Windows Updater permission VVulDB Updates15 uur geledenCVE-2023-29535 | Mozilla Firefox up to 111 Garbage Collector memory corruption (Bug 1820543 / EUVD-2023-33077)
+8
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4278818/beveiligingslekken-cve/critical-wordpress-flaws-allow-attackers-to-execute-remote-code-without-authentication/