latesthackingnews.com

wp2shell: WordPress Patches a Pre-Auth RCE That Needed No Plugins

WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated ...
Gadget Review on MSN

Hackers exploit patched WordPress bugs – millions of sites still at risk

WordPress WP2Shell vulnerabilities expose millions of unpatched sites to full remote takeover - update to 7.0.2 now to stay protected.

Experts warn millions of WordPress websites could be at risk following reveal of worrying bugs

Hackers are chaining together two newly discovered flaws to achieve remote code execution.

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...
techtimes

WordPress 7.0 Ships AI Agent Infrastructure: API Key Theft Risk Surfaces on Launch Day

WordPress 7.0 "Armstrong," released May 20, 2026, arrived without the real-time collaborative editing feature that had been its stated centerpiece for months — and within two days of launch, a ...

Hackers Can Easily Take Over WordPress Websites in Pakistan

Pakistan's National Cyber Emergency Response Team (National CERT) has issued a critical cybersecurity advisory warning that ...
Business Recorder

Govt warns of critical WordPress flaws exposing websites to takeover

Pakistan’s National Cyber Emergency Response Team (National CERT) has issued a high-severity cybersecurity advisory, warning ...