Experts warn millions of WordPress websites could be at risk following reveal of worrying bugs

Hackers are chaining together two newly discovered flaws to achieve remote code execution.

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...