⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

WordPress: Content Management System

June 25, 2026

WordPress Core is affected by the wp2shell vulnerability chain (CVE-2026-60137, CVE-2026-63030), enabling unauthenticated code execution via REST API and SQL injection.

Discovered from: Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files