WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for critical remote code execution vulnerabilities in WordPress Core, tracked as "wp2shell." These flaws allow attackers to execute arbitrary code on vulnerable servers, potentially leading to full site compromise. The vulnerabilities affect all versions of WordPress prior to the latest security patch. WordPress developers have released a patch, and administrators are urged to update immediately. The exploits were published on security research platforms, increasing the risk of widespread attacks. This is a high-severity issue for the millions of websites running WordPress.

Global Impact

WordPress powers over 40% of all websites, making this a widespread security event. The primary impact is on the web hosting and security industry, with hosting providers facing support and remediation costs.