cves:CVE-2020-15505 × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · há 1d · 2 fontes · 2 atualizações exploit público critical

wp2shell: WordPress core REST batch route confusion (CVE-2026-63030) and WP_Query SQLi (CVE-2026-60137) chain into unauthenticated RCE

Hacktron analyzes wp2shell, an unauthenticated RCE chain in WordPress core found by Searchlight Cyber. It combines CVE-2026-63030, a route handler confusion in the REST API batch endpoint, with CVE-2026-60137, an SQL injection in WPQuery. Affected versions are WordPress 6.9.0-6.9.4, 7.0.0-7.0.1 and the 7.1 beta, fixed in 6.9.5, 7.0.2 and …

CVE-2026-63030 CVE-2026-60137 CVE-2018-14028

f5.com · há 1d exploit público medium

Azure-hosted cluster scans for planted WordPress webshells tied to CVE-2018-14028, per F5 Honeynet March 2026 data

F5 Labs reports a scanning campaign observed on its Honeynet in March 2026. It recorded 1,897 session-grouped attempts (2,821 raw events) tied to CVE-2018-14028, a WordPress 4.9.7 unrestricted file upload flaw, and the CVE entered the monthly top 10 after being absent in February. Instead of exploiting the upload flaw, the operator probes…

CVE-2018-14028 CVE-2017-12932 CVE-2025-55182