THE article discusses a critical SQL injection vulnerability in WordPress, designated CVE-2026-63030, named 'wp2shell', which allows unauthenticated remote code execution. Detected initially by Searchlight Cyber, this vulnerability is unique as it is found in the WordPress Core rather than a plugin. The article advises WordPress users to check their installations and outlines potential exploit methods, including specific POST requests to the REST API that indicate how the vulnerability can be exploited.
The advised action is to review the '/cache/' directory for newly created files and check the database for any unauthorized admin users since attackers may also create admin accounts post-exploitation.