Bottom line: Publicly available exploits for critical RCE vulnerabilities in WordPress Core require prioritized patching efforts to defend against active attacks.
Public exploits are circulating for the Remote Code Execution vulnerabilities known as “wp2shell” in WordPress Core. CISOs must implement an immediate patching strategy for affected installations.
Security researchers have published public exploits for the critical Remote Code Execution (RCE) vulnerabilities known as “wp2shell” in WordPress Core. This means that attackers now have immediate access to the technical means to compromise affected WordPress installations.
The availability of public exploits significantly increases the risk for enterprise environments. WordPress-based systems hosting critical or sensitive business functions or data are now vulnerable to broader attack waves. For CISOs, this represents a measurable increase in the likelihood of exploitation in the coming days and weeks.
Immediate actions: Conduct an inventory of all WordPress Core installations, identify available patches, and roll them out in a prioritized sequence. In parallel, monitor security feeds and threat intelligence for indicators of active exploitation in your environment. For systems with delayed patching cycles, consider compensating controls (WAF rules, network segmentation) until patches can be deployed.
Source: www.bleepingcomputer.com · Published July 18, 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.