New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
A critical remote code execution vulnerability, identified as wp2shell, has emerged in WordPress core, allowing unauthenticated access to websites.
2 independently checked trend briefs about this subject, newest first.
headlinez.news detected 2 source-qualified news clusters connected to Cloudflare between June 23, 2026 and July 18, 2026. They span 1 newsroom category and average 7.0 independent sources per brief.
This hub includes only briefs supported by at least four sources and passed by the site's verification gate. Raw or weak detections may exist but are excluded here. Topic matching is based on the entities and themes recorded with each brief; open a card to inspect its source links, publication time, verification label and velocity history. Read the methodology and editorial policy for the full rules.
A critical remote code execution vulnerability, identified as wp2shell, has emerged in WordPress core, allowing unauthenticated access to websites.
Cloudflare is partnering with major web browsers to implement a new traffic verification protocol aimed at replacing traditional CAPTCHAs.