Exploit for Interpretation Conflict in Wordpress CVE-2026-63030

## https://sploitus.com/exploit?id=BDA0403D-3FE7-5608-A77D-752D35BDF234
# CVE-2026-63030 \| WP2Shell

xpl0ited by **[gr1tx](https://github.com/gr1tx0)**

WP2Shell is a Python-based Proof-of-Concept (PoC) for
**CVE-2026-63030**.

It performs time-based vulnerability verification against the WordPress
Batch API and generates detailed HTML and JSON reports.

The project is intended for **authorized security assessments,
penetration testing, vulnerability validation, and research purposes**.

------------------------------------------------------------------------

## Installation / Requirements

### Requirements

-   Python 3.9+
-   Linux / Windows / macOS
-   requests
-   urllib3

Clone the repository:

``` bash
git clone https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell/blob/main/CVE-2026-63030.py
```

Install dependencies:

``` bash
pip install requests urllib3
```

------------------------------------------------------------------------

## Usage

``` bash
python3 CVE-2026-63030.py --help
```

Example:

``` text
usage: CVE-2026-63030.py [options] target_file

Options:
  --threads
  --sleep
  --retries
  --timeout
  --delay
  --max-targets
  --output
  --insecure
  --verbose
  --authorized
```

------------------------------------------------------------------------

## Examples

Help:

``` bash
└─$ python3 CVE-2026-63030.py --help
usage: CVE-2026-63030.py [-h] [--threads THREADS] [--sleep SLEEP]
                         [--retries RETRIES] [--timeout TIMEOUT]
                         [--delay DELAY] [--max-targets MAX_TARGETS]
                         [--output OUTPUT] [--insecure] [--verbose]
                         [--authorized]
                         target_file

WP Batch SQLi Auditor — safe time-based SQL injection testing for authorized
assessments. by gr1tx

positional arguments:
  target_file           File containing a list of URLs

options:
  -h, --help            show this help message and exit
  --threads THREADS
  --sleep SLEEP
  --retries RETRIES
  --timeout TIMEOUT
  --delay DELAY
  --max-targets MAX_TARGETS
  --output OUTPUT
  --insecure            Disable TLS verification
  --verbose, -v
  --authorized          Confirm that authorization for testing has been obtained
```
Basic scan:

``` bash
python3 CVE-2026-63030.py targets.txt --authorized
```

Verbose mode:

``` bash
python3 CVE-2026-63030.py targets.txt --authorized --verbose
```

Custom report:

``` bash
python3 CVE-2026-63030.py targets.txt --authorized --output report
```

Generated files:

``` text
report.json
report.html
```

------------------------------------------------------------------------

## Features

-   Time-based verification
-   Multi-threaded scanning
-   HTML & JSON reports
-   Verbose logging
-   Configurable retries
-   Configurable delays
-   TLS verification support
-   Cross-platform

------------------------------------------------------------------------

## ⚠️ Disclaimer ⚠️

This software and proof-of-concept code is provided **for educational
and research purposes only**.

-   The author is **not responsible** for any misuse or damage caused by
    this program.
-   **Do not use** against any systems without explicit **prior
    permission**.
-   Use of this tool against systems without authorization may be
    **illegal**.

You are responsible for obeying all applicable laws. **Use ethically and
responsibly.**