WordPress Core RCE "wp2shell" exploits now public, patch immediately

Affected Systems

WordPress Core (specific versions not disclosed in provided data). Vulnerability enables remote code execution. Public exploits available under the name "wp2shell".

Exploitation Status

Public exploit code available. Active exploitation likely given public PoC release and critical severity rating. WordPress Core installations are high-value targets with broad attack surface.

Business Impact

Critical risk to all WordPress installations. Attackers can achieve remote code execution, leading to full site compromise, data theft, malware distribution, and lateral movement within networks. WordPress powers ~43% of websites globally, making this a widespread threat. CVE identifier not yet assigned. Immediate action required to prevent mass exploitation.

Urgency

🔴 Immediate

Recommended Actions

• Update all WordPress Core installations to the latest patched version immediately via wp-admin or WP-CLI
• Audit WordPress access logs and web server logs for suspicious POST requests or unexpected file uploads in the past 72 hours
• Enable WordPress auto-updates for core if not already configured to prevent future exposure
• Implement web application firewall (WAF) rules to block wp2shell exploit patterns if patching cannot be completed within 24 hours
• Verify file integrity of wp-admin, wp-includes, and wp-content directories using checksums or file monitoring tools