Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-09-05 · 02:16 UTC
articleTotal: 1184 reports
Filtered Reports
3 / 3 results
criticalbug_reportVulnerabilitybug_reportVulnerability
WordPress Core RCE flaws CVE-2026-63030, CVE-2026-60137 under active exploit
WordPress Core (specific versions not disclosed in advisory). Two remote code execution vulnerabilities (CVE-2026-63030, CVE-2026-60137) affecting the core platform.
CVE-2026-6013722 Jul · 14:09 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
WordPress Core wp2shell flaws actively exploited for webshell deployment
WordPress Core (specific versions not disclosed). Both CVE-2026-63030 and CVE-2026-60137 affect core WordPress installations, enabling remote attackers to deploy webshells and malicious plugins.
CVE-2026-6013721 Jul · 14:41 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
WordPress wp2shell flaws enable unauthenticated RCE, active exploitation
WordPress core (specific versions not disclosed). CVE-2026-63030 and CVE-2026-60137 must be chained for unauthenticated remote code execution. All unpatched WordPress installations are potentially vulnerable.
CVE-2026-6013721 Jul · 06:59 UTC