WordPress “wp2shell” RCE: Critical Core SQL Injection (CVE-2026-60137) Under Active Attack
Introduction The WordPress ecosystem is currently facing one of its most significant security threats in years. Dubbed "wp2shell," a newly discovered exploit chain targeting WordPress Core allows for unauthenticated remote code execution (RCE) on default…