What’s happening Security researchers have disclosed a vulnerability in WordPress Core itself, nicknamed “wp2shell” and tracked as CVE-2026-63030. It affects the REST API on WordPress versions 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1, and when chained with a second flaw, it allows remote code execution. In plain English, an attacker can potentially plant malware, steal … Read more