The Hacker News

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and ...
cybernews

WordPress urges immediate update: hackers are gaining full control with a critical exploit

The wp2shell exploit allows attackers to gain full control of WordPress without any login. WordPress has issued emergency updates to patch actively exploited, critical vulnerabilities. The exploit ...

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

Attackers pummel critical WordPress vuln to create all sorts of mischief

Just hours after fixes came out, attackers have begun exploiting two bugs that, when chained together, allow ...
Infosecurity Magazine

Researchers Build WordPress Exploit Using OpenAI's GPT

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain ...
Bleeping Computer

Critical Erlang/OTP SSH pre-auth RCE is 'Surprisingly Easy' to exploit, patch now

A critical vulnerability in the Erlang/OTP SSH, tracked as CVE-2025-32433, has been disclosed that allows for unauthenticated remote code execution on vulnerable devices. The flaw was discovered by ...