# WordPress Core "wp2shell" RCE flaws get public exploits, patch now

> **Open Intelligence Dossier** · First detected: 2026-07-19 09:07 UTC · Category: Technology

## Executive Summary
Public exploits for the WordPress Core "wp2shell" RCE flaws are driving mass scanning and active attacks against millions of websites.

## Intelligence Brief
A critical security situation has emerged as public exploits become available for remote code execution (RCE) vulnerabilities known as "wp2shell" within the WordPress Core. According to reports from BleepingComputer and Help Net Security, these vulnerabilities are classified as high severity and require immediate patching to prevent unauthorized access. TechCrunch reports that hackers are actively exploiting these recently patched bugs, a development that places millions of websites at risk of compromise if administrators fail to update their installations promptly. Coverage from The Hacker News and wiz.io emphasizes that the situation is escalating as the availability of public exploits fuels a surge in mass scanning activities. SecurityWeek further confirms that these wp2shell vulnerabilities are being exploited in the wild, indicating that threat actors are actively targeting vulnerable WordPress sites.


The reporting across these outlets highlights a race between attackers utilizing automated scanning tools and website owners who must apply the necessary security patches to secure their systems. To understand the current risk, readers should note that WordPress Core is the foundational software for a vast portion of the internet. The appearance of RCE flaws is particularly dangerous because it allows an attacker to execute arbitrary code on a server. As noted in a weekly recap by The Hacker News, this incident coincides with other significant threats, including SonicWall 0-Days, AI service attacks, and a SharePoint 0-Day, suggesting a broader environment of heightened cyber risk across multiple platforms. Looking ahead, the primary focus remains on the rate of patching across the global WordPress ecosystem.


Because public exploits are now available, coverage suggests that mass scanning will likely continue. The immediate priority for users is to patch the identified vulnerabilities. Further developments will depend on whether the exploitation grows in scale and how many websites remain vulnerable to the wp2shell flaws despite the availability of the security updates.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| wiz.io | Exploitation in the Wild of wp2shell | [Source Link](https://news.google.com/rss/articles/CBMib0FVX3lxTE1jcmJmaHl4ZGRjZlVFbUNqQ1NrdWw2UVlDamd6QmVDbEVTVDNrQTcwX2FfV1N2YlprTEoyRjgzM0w1Wmx5dmNveDI2bXpFWG5vb0RtVFp4YjBjRl9aa3F0TEVhdlVCbEJVd3R0eVZwZw?oc=5) |
| The Hacker News | WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxNUFNJVDlTZGxJTWQ0d0VJV29mLVdzTGhmcFJZWmdaVWdyUy1uaWRSanZHSDZfU2t4dlI2RzdMUlM2YTRvMW5tZnUwSFdicU9RZElyOEtPejNITlh1MGFhcDVLU1ljWTIybHoyZEVXMGZQb1ZrUVprTjJjaDVRMnk2dGlB?oc=5) |
| TechCrunch | Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk | [Source Link](https://news.google.com/rss/articles/CBMixAFBVV95cUxNZXdjRTBqRkh2ODFFbXYwaTVZRGZzUDZlVUtJV2JlaGh3aW9uQ3hmemMzbkdWUVlmQUdsbTZKV3RqRC12dHQxS01uaGJIYXdlQ0IxcDJlUldySnFPREZnVEpRRWZXazBIcDExLXAyUjEwZjFyZzhoSnhUbm5nT3lGVFJRdDdzOVN0ZlF3Uzl0aTl4UVpaSFBYdmRjOWFLOFIySHhCSTdOX3FycjVYSnl4ZXllRjBzWnB0ZUtQQmdSZ3pKVXh5?oc=5) |
| The Hacker News | ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxOdDVBdERyYU0tV2ExVmhUY0V4d0VKNjZ6TlY0Yk1aa185YVpnY1hqTVU5UzBaUXNWRGxRandUbktzLVZDdkdiWmZxX19xS082OG44WWtGekFHWmlMdjRIaG5sSlBpd2NnenFPcFRWYjNRWHQ0ZVNOcG02NlpuMXp2NTVhaw?oc=5) |
| Help Net Security | Two new high severity WordPress vulnerabilities, patch immediately! | [Source Link](https://news.google.com/rss/articles/CBMirAFBVV95cUxOejFCN09vbnJxa1ZySWtQN3o1U2ZhU3p2bjRIX1AyN1A0M2M1RnRHZ3lVc3NQRDJoWkJJYWFESGw4bndxLVdDOTdMZ2R6TWhuY3RrQ3FzNHA2VWVzTGpTN2FLRnZ4Q3FsZlk0ZVlkUDZORlVScmRyOEFVVm1aZGtyalBraFVySzlEbmdvNHZUN2RCcmRmaEo0SUtlTkFaZ1pGNS1sSk1RSWVmV196?oc=5) |
| SecurityWeek | WP2Shell WordPress Vulnerabilities Exploited in the Wild | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxOWlk3WTR1QVlSZUxmdG1GRkcxWFRYSC03N3c5cEFxUm5aRExlQ01vMVl4NXFTQXg0Z1FCcjllbmhIV2cwdmhTMlR4dmYzNDBSMFV5d0hlS0w3a0JGWlpCSmd3TmpHZ3RGOGo5MVVwYTNzb29LSkJpcVp6eWhBTzlJR0FONkE1d0FvRXRlc1dqSdIBlAFBVV95cUxQenF4d0FkcEFxZE5WVGJzeFhaNDdXdFF4OGU2RmwyUnNpV2dDajlxa29ydHZtWVJhbWlDY09BRjJ3TEdzRENFbEtMWGl1MVJmdDFjOVJjcTB2SExWSmRWaXNyR3pXY3VxS1l5VUZyMWZQTW51Mll4U1pTZEJFUVhnQWc3cEJOM2JROVgtQ0ZHU1hLRFd0?oc=5) |
| BleepingComputer | WordPress Core "wp2shell" RCE flaws get public exploits, patch now | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxOcFZsQ3ZtY3JublFESllYMWhETDlka2J1Y25MUnBlWUFEYXJpdS1IRHNLNE9yOEZ1ZTVoWjdsR1ZhMEotZlhxWHlqa0tIYUdFVmM4cEpFeXFsaXBLRE9fTWRBc1FqYjUxaTQzVThGWEI3VkJyN0U3UHhtS2RCdEhTRVdlajVGUFlPZFl4VjRTTjJxQ1hmOUFCelZTRDBZb2xmYTlUc2YxazZXRkg5eWxVedIBtgFBVV95cUxPZk5ITFp6Q3JNa2RLN0Zoa25UU0dEWWp0Tng5emdEYU5WZjZWb0M2UnJCQnVzTzJneUFlN2hkSklFUzlHZ2lQRE8zQWQ2a2dOWnBNSEhJVEZaMjlMZzdBWUpXZHFPMU9FdmkyMnJjN0NRVnpEcEJWVGh4OGV4eWNyMktSUGEzUldrMzBVa0E1aWwtcm9rY05yUVJGQkM3bVZpT2V) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-19/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now*