Tag

#malware

2posts tagged #malware.

wp2shell: the complete guide to the WordPress core RCE
August 25, 2026 18 min

wp2shell is a pre-authentication remote code execution chain in WordPress core (CVE-2026-63030 and CVE-2026-60137). What it is, whether you are affected, how to tell if your site was already hacked, and how to clean it.
- #wordpress
- #cve
- #exploit
- #malware
- #cleanup
BdThemes ecosystem hit by a poisoned API response
August 9, 2026 1 min

A supply-chain compromise in the BdThemes plugin ecosystem is pushing malicious payloads through a poisoned update API response, reaching sites that never installed anything new.
- #wordpress
- #plugin
- #supply-chain
- #malware