importantSYS.SOURCE: The Hacker News• 2026-07-18T02:50:10+05:30

Critical WordPress Core Vulnerability Allows Unauthenticated Remote Code Execution via wp2shell

#wordpress security #remote code execution #sql injection #patch management #vulnerability

A critical WordPress core vulnerability (wp2shell) enables unauthenticated remote code execution through a chained SQL injection and REST API flaw, affecting versions 6.9 and 7.0 prior to patches. The vulnerability, disclosed with CVEs and a public exploit, highlights the risks of default configurations and the urgency of applying updates.

Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a working proof-of-concept is public. The story below reflects all of it.

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until

Read original article

*** END OF TRANSMISSION ***

> NEIL RIMER ADVOCATES FOR AI INVESTMENT REDISTRIBUTION AMID SHIFTING PHILANTHROPY TRENDS > EXPLOITING JPEG PROGRESSIVE ENCODING FOR MULTI-IMAGE CONCATENATION > MOONSTONE: A CROSS-PLATFORM LUA RUNTIME AND PACKAGE MANAGER BUILT WITH ZIG > EXPLORING THE CONCEPT OF A MESSY NOTEBOOK FOR UNSTRUCTURED NOTE-TAKING > DRDROID SEEKS PRODUCT ENGINEER WITH AI AND DISTRIBUTED SYSTEMS EXPERTISE > STENCHILL: 3D-PRINTABLE SOLDER PASTE STENCIL GENERATOR FOR PCB PROTOTYPING > ISOMORPHIC LABS UNVEILS NEXT-GENERATION DRUG DESIGN ENGINE BEYOND ALPHAFOLD 3 > STRIPE X STARTUP BATTLEFIELD: AUSTRALIAN FOUNDERS' GUIDE TO APPLICATION DEADLINE AND COMPETITION DETAILS > VERTU'S ALPHAFOLD AI AGENT EVALUATION: LUXURY PHONE WITH EXECUTIVE-FOCUSED AI FEATURES > KAISER NURSES REPORT ADVERSE EFFECTS OF AI AND WORKPLACE SURVEILLANCE ON JOB PERFORMANCE AND PATIENT CARE> NEIL RIMER ADVOCATES FOR AI INVESTMENT REDISTRIBUTION AMID SHIFTING PHILANTHROPY TRENDS > EXPLOITING JPEG PROGRESSIVE ENCODING FOR MULTI-IMAGE CONCATENATION > MOONSTONE: A CROSS-PLATFORM LUA RUNTIME AND PACKAGE MANAGER BUILT WITH ZIG > EXPLORING THE CONCEPT OF A MESSY NOTEBOOK FOR UNSTRUCTURED NOTE-TAKING > DRDROID SEEKS PRODUCT ENGINEER WITH AI AND DISTRIBUTED SYSTEMS EXPERTISE > STENCHILL: 3D-PRINTABLE SOLDER PASTE STENCIL GENERATOR FOR PCB PROTOTYPING > ISOMORPHIC LABS UNVEILS NEXT-GENERATION DRUG DESIGN ENGINE BEYOND ALPHAFOLD 3 > STRIPE X STARTUP BATTLEFIELD: AUSTRALIAN FOUNDERS' GUIDE TO APPLICATION DEADLINE AND COMPETITION DETAILS > VERTU'S ALPHAFOLD AI AGENT EVALUATION: LUXURY PHONE WITH EXECUTIVE-FOCUSED AI FEATURES > KAISER NURSES REPORT ADVERSE EFFECTS OF AI AND WORKPLACE SURVEILLANCE ON JOB PERFORMANCE AND PATIENT CARE