Critical WordPress Vulnerabilities Exploited: Hackers Deploy Webshells and Malicious Plugins

A suite of critical vulnerabilities within WordPress Core, identified as 'wp2shell' (CVE-2026-63030 and CVE-2026-60137), is actively being exploited by cybercriminals to gain unauthorized access and install persistent backdoors on countless websites globally.

Loading lens…