#CVE-2026-60137

Unauthenticated attackers exploit WP2Shell vulnerabilities to achieve remote code execution on WordPress websites

Attackers are actively exploiting two critical vulnerabilities, dubbed "WP2Shell," to take control of WordPress websites.