Top Tweets for #wp2shell
WordPressコアの #wp2shell（CVE-2026-63030 + CVE-2026-60137）について。
https://t.co/quyO53Zo7A で、未認証からRCEまで到達する詳細なPoCが公開されています。
単純な「SQLi → 管理者作成」ではなく、REST APIのRoute Confusionを起点にSQLiへ到達し、UNION SELECTでWordPress内部の処理を悪用 → 管理者権限のコンテキストで新規admin作成 → プラグイン型WebShell配置、というかなり巧妙なチェーンです。
現時点では、Xを見る限り大規模なスキャンや悪用の観測は目立っていませんが、これだけ実用的なPoCが公開されると、数日以内に広範なスキャンが始まるのではないでしょうか。
特に日本は3連休。監視やパッチ適用が後手に回りやすいタイミングですね。対象WordPressの早期更新が最優先！ #WordPress
# 企業ではまずはWPを利用しているサイトの把握から...
Prompt Reversing 🙌
Used the patches in the latest Wordpress version 7.0.2 to recreate with a swarm of claude sonnet 5 sub-agents.
wp2shell: Pre Authentication RCE in WordPress Core
Shoutout to @hash_kitten for finding the bug 🔥
#wp2shell
WordPressコア本体に緊急脆弱性「wp2shell」｜プラグイン不要でサイト乗っ取り、今すぐ確認すべきこと
#WordPress #wp2shell #セキュリティ #脆弱性 #WordPressセキュリティ #RCE #緊急アップデート
https://t.co/YcLaaqS3n7
#wp2shell is what happens when a value escapes validation and keeps its original shape all the way to SQL.
Our full breakdown from the fix assurance angle: https://t.co/49RX7htYh2
1/4
We did our own breakdown of #wp2shell, the WordPress chain Adam Kues of Assetnote reported.
The useful shape: public REST collection, batch routing drift, wrong schema check, raw string into WP_Query.
The best wp2shell PoC in the Internet :
https://t.co/oFjzkQFZoB
#CyberSecurity #WordPress #Wp2Shell #CVE202663030 #CVE202660137 #SQLInjection #RemoteCodeExecution #AWSAccessKeyLeak #ShodanExploitation
Détectez facilement si le #WordPress que vous utilisez est vulnérable à #wp2shell ou pas avec notre outil opensource Python :)
https://t.co/sAyCFZpbYr
Une requête HTTP anonyme. 30s plus tard : admin créé + webshell + un shell qui répond à "id". WordPress en config par défaut, pas un plugin.
wp2shell (CVE-2026-63030), RCE pré-auth dans le cœur.
https://t.co/WsvLfxwZEo
#WordPress #RCE #wp2shell
J'avais déjà pris les devants sur mes sites #WordPress sous #Apache pour bloquer des utilisations à risque de l'API REST. Par de simples règles de #rewriting avec le module #mod_rewrite, j'avais rendu impossible la #vulnérabilité #wp2shell.
https://t.co/pSn8q8Py8i
CVE-2026-63030 wp2r00t PoC - WordPress REST Batch Route-Confusion SQLi
https://t.co/R28fq8QQr2
Note: This is NOT the full weaponized chain. For the complete version, please DM me or comment.
#CyberSecurity #CVE #RCE #InfoSec #wp2shell #CFSD #C4b1nKr3w
Poor triagers #wp2shell
I want to share my thoughts about CVE-2026-63030 (#wp2shell) and explain why I think it's less big of a deal than everybody is thinking. @hash_kitten found a very elegant and clever vulnerability and no doubt it's a superb achievement to get RCE in Wordpress Core.
1/5
#wp2shell works only with stock theme? Seems like the public poc has limitations
One missing array entry started it all.
then two WordPress core bugs chained through SQL injection, cache poisoning and an administrator identity switch -> ending in unauthenticated RCE.
We reconstructed the path.
CVE-2026-63030
kudos for discovering @hash_kitten @assetnote
🚨 Vulnerabilidade crítica no WordPress Core (wp2shell) permite controlo total do site SEM autenticação. Exploit já público.
Atualize já para 6.8.6 / 6.9.5 / 7.0.2
Como agir 👇
https://t.co/7MSAn7xE88
#WordPress #wp2shell #Segurança
🚨 UPDATE: The #wp2shell attack chain now includes two CVEs, and a public PoC is available.
• CVE-2026-63030 — REST batch routing bypass
• CVE-2026-60137 — SQL injection
When chained together, they can allow unauthenticated remote code execution (RCE) on vulnerable WordPress
#wp2shell の解説記事。いつも仕事が速い！ https://t.co/9jnLheEN2C
New #wp2shell #WordPress Core Flaw Lets Unauthenticated #Attackers Run Code
https://t.co/WlrkqApvQj via @TheHackersNews
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.7M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.2M followers
Taylor Swift
@taylorswift13
82.1M followers
Lady Gaga
@ladygaga
73.6M followers
Virat Kohli
@imvkohli
70.8M followers
Kim Kardashian
@kimkardashian
70.1M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.2M followers
Neymar Jr
@neymarjr
63.7M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.3M followers
X
@x
60.8M followers