/
vendors:WordPress × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · critical

WP2Shell: CVE-2026-63030 and CVE-2026-60137 chained for unauthenticated RCE on default WordPress, exploitation observed

Researchers describe WP2Shell, a chain of two WordPress core flaws, CVE-2026-63030 and CVE-2026-60137, that lets unauthenticated attackers progress from public REST API endpoints to remote code execution. It affects default installations with no third-party plugin required. Public exploit code exists and exploitation attempts have been ob…

CVE-2026-63030 CVE-2026-60137
gbhackers.com · · 4 fontes · 4 atualizações critical

Rank Math PRO 3.0.123 trojanized in supply chain attack: self-restoring WordPress backdoor (CVE-2026-111862)

The paid WordPress SEO plugin Rank Math PRO was hit by a supply chain attack. Copies of version 3.0.123 downloaded from the vendor's site or delivered as updates between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC contained malware (securityweek.com, thehackernews.com, bleepingcomputer.com). Any site that installed and activ…

CVE-2026-111862 technology