Critical WordPress Vulnerability “wp2shell”— Self‑Assessment and Remediation

Recently, a critical WordPress core vulnerability chain known as “wp2shell” has been disclosed, involving CVE‑2026‑63030 and CVE‑2026‑60137. With a CVSS score of 9.8, the flaw enables unauthenticated remote code execution (RCE).

This article is written in Chines only