scanning advisory feeds…

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately.

Grace Ops

CONTENT OPTIMIZATION · AEO/GEO

PENDING

Not yet scored. Next refresh: 02:00 UTC.

discussion

0 comments

Loading comments…

audit trail / provenance3

Provenance

Claims tie surfaced fields back to sources, models, or heuristics.

severity.upliftheuristicn/a
CVE or advisory identifiers detected — floor raised to at least high.
severity.upliftheuristicn/a
Active exploitation / in-the-wild language detected — floor raised to at least high.
severity.upliftheuristicn/a
Mass-impact scope with confirmed exploitation → uplift toward critical.

What changed

Append-only revisions when ingest or analysts evolve the record.

No revision rows stored yet.

Sources

https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/

Curated Jul 18, 2026 by Aidan Duffy, Threat intelligence editor, AHackaday./Methodology/Sources verified.

Brief grounded in 1 source.

Grace Ask GracereadyGrace is ready

Grounded in this brief only — WordPress Core "wp2shell" RCE flaws get public exploits, patch now. Press ⌘K any time.

You're answering aschange anytime

Pick a playor type your own ↓

Tone

Pull keywords → Generate

Generate an answer and Grace will return a grounded response for this incident.

social pulse

mentions (24h)28

velocitytrend flat

mentions delta+4% vs prior snapshot

platform splitX 0% · Reddit 0% · GitHub 100%

keywords

bloghtmlcomments

x analyticsheat 0 (flat)

authors 0verified 0%

likes0

retweets0

replies0

quotes0

cross-platform summaryLive chatter is accelerating; analysts are actively validating impact.