wp2shell-PoC

CVE-2026-63030 RCE Python #poc #github #cve-2026-63030 #rce

Author

sowarma

Published

2026-08-05

Stars

351

Forks

22

Repository

sowarma/wp2shell-PoC

Description

CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept

View on GitHub More PoCs for CVE-2026-63030

CVE-CVE-2026-63030 Details

Severity

CRITICAL

CVSS Score

9.8

CWE

CWE-436

Description

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution....

View on NVD

Related PoCs for CVE-2026-63030

wp2shell-Exploit-Waf-Bypass...

1 M4xSec

View all PoCs for CVE-2026-63030 (2 total)