Breach404
Back to Insights
Cloud Security2 min readJuly 18, 2026

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Critical remote code execution vulnerabilities in WordPress Core, known as "wp2shell," now have publicly available exploits that attackers can use to compromise websites. All WordPress administrators must apply security patches immediately, as these flaws

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free