'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Summary

Attackers are actively exploiting two vulnerabilities, CVE-2026-60137 and CVE-2026-63030, to gain remote control of millions of WordPress websites. This widespread exploitation began shortly after the vulnerabilities were disclosed, targeting one of the internet's largest attack surfaces.

Indicators of Compromise

• cve — CVE-2026-63030
• cve — CVE-2026-60137

Entities