Top Tweets for #XSS2Shell
🔴 #XSS2Shell: nuova vulnerabilità nel core di WordPress può portare all’esecuzione di codice remoto.
➤ Sono già disponibili PoC pubblici che riproducono la catena XSS2Shell.
ℹ️ Ulteriori approfondimenti 👇
🔗 https://t.co/KukSWPYMIM
🚨 XSS2Shell — From XSS to Shell
Interesting PoC demonstrating how an XSS vulnerability can potentially be chained toward deeper system compromise.
🔗 Full PoC: https://t.co/GgkedJeRKh
#CyberSecurity #XSS #XSS2Shell #ExploitDevelopment #BugBounty #InfoSec #RedTeam
🚨 A single failed login attempt on WordPress can now give an attacker complete control over the server. More than 500 million WordPress sites have been affected by this XSS2Shell vulnerability.
Source: https://t.co/yD5TLzwm64
#CyberAwareness #wordpress #XSS2Shell #cybersecuritynews
WordPress 7.0.3緊急リリース、新脆弱性「XSS2Shell」を修正｜4.7以降の全バージョンが対象、今すぐ更新を
#WordPress #XSS2Shell #CVE202664638 #セキュリティ #緊急パッチ #WordPressセキュリティ #脆弱性 #Web制作 #サイト運営
https://t.co/3mabGKgOFV
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
https://t.co/XgPiYjaK5G — If you don't have automatic update for maintenance and security releases enabled for some reason, this would be the good time to do so! #WordPress #Security #XSS2Shell #Patch
#Wordpress: A Critical pre-auth #XSS to RCE vulnerability chain (CVE-2026-64638) dubbed #XSS2Shell is affecting all versions of WordPress Core. This vulnerability was discovered by AI (@pwn_ai). Patch to v7.0.3 ASAP - older versions backported:
👇
https://t.co/AkABU2tNRL
These chains are getting more and more creative. Really cool & impactful bug. I created a hand-on lab for those who want to understand the root cause and build the exploit step by step.
Link: https://t.co/wtyAVlz7HE
#xss2shell #infosec #bugbounty #wordpress #0day
Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions.
https://t.co/Fql6aLPrtT
Please patch CVE-2026-64638 as soon as possible!
A malformed WordPress login field can end in a full server takeover - no auth required to start the chain. https://t.co/7P5eVtaxIM #ThreatIntel #CVE_2026_64638 #Same #XSS2Shell
WordPress 7.0.3 patches CVE-2026-64638, a pre-auth reflected XSS in the login screen that can chain to PHP code execution under certain conditions. #WordPress #CVE202664638 #XSS2Shell
https://t.co/SFaimFormh
#WordPress #XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
https://t.co/L5nsvQSpES
#securityaffairs #hacking
@pwn_ai
Most Popular Users
Elon Musk 
@elonmusk
241.2M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.9M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.3M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.5M followers
KATY PERRY
@katyperry
89M followers
Taylor Swift
@taylorswift13
82.9M followers
Lady Gaga
@ladygaga
74.4M followers
Virat Kohli
@imvkohli
71.9M followers
Kim Kardashian
@kimkardashian
70.5M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
64.9M followers
Bill Gates
@billgates
64.6M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
62.1M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers