ctrlINT What the industry said about every indicator, with the quote

wp2shell[.]comDomain

Reported by 2 independent sources · first reported by Infosecurity Magazine · last reported

Last reported 3 months ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “Check exposure at wp2shell[.]com and treat any internet-facing vulnerable instance as potentially compromised until patched.”

    Elastic Security LabsVendor
    wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution

  2. “Additionally, Searchlight Cyber has released a free scanning tool at wp2shell[.]com so that administrators can safely check if their servers remain vulnerable to this AI-crafted attack.”

    Infosecurity MagazineNews
    Researchers Build WordPress Exploit Using OpenAI's GPT

Indicators reported together

named in the same reports

Also named with it: CVE-2026-60137, CVE-2026-63030

Thanks — we review every report.

Report a wrong value
What is wrong with wp2shell[.]com here?
No account needed. We do not store your IP address.