Share
## https://sploitus.com/exploit?id=1E81FE1D-56AC-580B-A643-6DACCA09D25B
# wp2shell

\[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core

![Drupal CVE-2026-9082](https://n45ht.or.id/images/wp2shell.png)

## Usage

```bash
./wp2shell.py --url https://target.com
./wp2shell.py --urls target.txt
```

## References 
- https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core/
- https://nvd.nist.gov/vuln/detail/CVE-2026-60137
- https://nvd.nist.gov/vuln/detail/CVE-2026-63030
- https://github.com/0xsha/wp2shell
- https://github.com/Icex0/wp2shell-poc
- https://github.com/sergiointel/wp2shell-poc