Gadget Review on MSN

Hackers exploit patched WordPress bugs – millions of sites still at risk

WordPress WP2Shell vulnerabilities expose millions of unpatched sites to full remote takeover - update to 7.0.2 now to stay ...

wp2shell: Critical WordPress vulnerability allows code injection via API

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the ...

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...
Searchenginejournal.com

Why WordPress 6.9 Abilities API Is Consequential And Far-Reaching

WordPress 6.9, scheduled for release on December 2, 2025, is shipping with a new Abilities API that introduces a new system designed to make advanced AI-driven functionality possible for themes and ...
The Hacker News

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.
Security Boulevard

WordPress Critical RCE Security Flaw a Threat to Millions of Websites

Administrators are being urged to patch a critical pre-authentication RCE vulnerability in WordPress that threatens millions of websites and which can lead to a full takeover by attackers.