Skip to main content
Back to feed
CyberConfirmedHighDevelopingFeatured
10.0

Active exploitation of critical WordPress wp2shell vulnerabilities detected

Threat actors are actively exploiting two critical vulnerabilities, CVE-2026-63030 and CVE-2026-60137, in WordPress Core to deploy persistent webshells and malicious plugins. The scope of the compromise and the specific threat actor attribution remain uncertain, posing a significant risk to server integrity across the WordPress ecosystem.

BleepingComputerabout 5 hours agoCredibility 54%View source

Score Breakdown

Mosaic Score10.0
Confidence0.9
Significance0.8
Source credibility0.5

Intelligence Tags

#wordpress#vulnerability#webshell#cybersecurity#cve
Source

Part of 2 situations

developingCyber5m ago

Multiple Critical Vulnerabilities Actively Exploited Across Enterprise Software

Threat actors are actively exploiting critical vulnerabilities in WordPress, ServiceNow, and Microsoft SharePoint. These exploits enable webshell deployment, arbitrary code execution, and persistent access, posing significant risks to server integrity and enterprise environments. The scope of compromise and specific threat actor attribution remain largely uncertain.

↑ escalating·6 signals·US, CN, MXScore 7.5
activeTradeGeopolitics4m ago

China — 10 developments

→ stable·56 signals·NI, US, CR +34Score 6.4

Related signals

8 found