wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
-
Updated
Aug 11, 2026 - Python
#
cve-2026-63030
Here are 24 public repositories matching this topic...
Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1
-
Updated
Jul 22, 2026 - Python
WP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL queries and achieve Remote Code Execution (RCE) on vulnerable WordPress installations.
-
Updated
Jul 18, 2026 - Python
Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)
-
Updated
Jul 18, 2026 - Python
wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7.0.0–7.0.1.
wordpress wordfence wordpress-core codeb0ss realcodeb0ss thecodeb0ss wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Jul 18, 2026 - Python
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core
-
Updated
Jul 18, 2026 - Python
wp2shell - WordPress CVE-2026-63030 Exploit & Scanner
python wordpress exploit rce sql-injection security-tools vulnerability-scanner unauthenticated unauthenticated-rce wp2shell wp2shell-poc cve-2026-63030
-
Updated
Jul 18, 2026 - Python
Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.
wordpress security rest-api penetration-testing bug-bounty wordpress-security cve wordpress-scanner offensive-security security-scanner ethical-hacking red-team security-tools vulnerability-scanner wordpress-rest-api blue-team abdal rest-api-security exposure-detection cve-2026-63030
-
Updated
Jul 24, 2026 - Go
PoC for the WordPress 6.9/7.0 REST batch-route confusion and author__not_in SQL injection chain.
docker wordpress wp-cli proof-of-concept sql-injection wordpress-security security-research vulnerability-research cve-2026-63030 cve-2026-60137
-
Updated
Jul 18, 2026 - Python
WordPress REST API SQLi to RCE PoC (CVE-2026-63030 & CVE-2026-60137)
proof-of-concept poc sql-injection wordpress-rce wp2shell wp2shell-poc cve-2026-63030 wp2shell-exploit
-
Updated
Jul 21, 2026 - Python
Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only.
-
Updated
Jul 19, 2026 - Python
CVE-2026-63030 - WordPress REST Batch Route-Confusion SQL Injection Proof of Concept
-
Updated
Jul 20, 2026 - Python
Critical Wordpress to Shell (unauthenticated)
-
Updated
Jul 20, 2026 - Python
WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)
-
Updated
Jul 20, 2026 - Python
WordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.
penetration-testing security-scanner vulnerability-scanner wordpress-security-scanner wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Jul 20, 2026 - Python
Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.
-
Updated
Jul 18, 2026 - Python
WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)
python wordpress security exploit rce sql-injection vulnerability cve batch-api pre-auth wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Jul 24, 2026 - Python
Read-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)
python cli wordpress security rce infosec security-tools vulnerability-scanner wp2shell cve-2026-63030 cve-2026-60137
-
Updated
Aug 30, 2026 - Python
CVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)
-
Updated
Jul 21, 2026 - PHP
Add this topic to your repo
To associate your repository with the cve-2026-63030 topic, visit your repo's landing page and select "manage topics."