hpr4731 :: A Website Hacked
About an encounter with wp2shell that was not so bad
Hosted by Lee on Monday, 2026-09-21 is flagged as Clean and is released under a CC-BY-SA license.
wordpress, security.
(Be the first).
Listen in ogg,
opus,
or mp3 format. Play now:
Duration: 00:13:48
Download the transcription and
subtitles.
Privacy and Security.
In this open series, you can contribute shows that are on the topic of Privacy and Security
[WP2Shell is] a pre-authentication RCE in WordPress Core . The attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins.
- from wp2shell.com
Wordpress.org - https://en-gb.wordpress.org/
Searchlight WP2Shell Website - https://wp2shell.com/
CVE-2026-63030 - https://nvd.nist.gov/vuln/detail/CVE-2026-63030
CVE-2026-60137 - https://nvd.nist.gov/vuln/detail/CVE-2026-60137
OpenSSH - https://www.openssh.org/
FileZilla - https://filezilla-project.org/
GNU Tar - https://savannah.gnu.org/git/?group=tar
GZip - https://www.gzip.org/