{"schema":"vulnpedia.research/1","cve":"CVE-2026-60137","references":[{"url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf","tags":["vdb-entry","technical-description","Vendor Advisory"],"source":"mitre","sourceId":"WPScan","modified":"2026-07-18T04:13:49.003Z","origins":[{"source":"mitre","sourceId":"WPScan","modified":"2026-07-18T04:13:49.003Z","url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf"},{"source":"nvd","sourceId":"CVE-2026-60137","modified":"2026-10-08T10:35:47.777","url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf"}]},{"url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/","tags":["release-notes","vendor-advisory","Release Notes"],"source":"mitre","sourceId":"WPScan","modified":"2026-07-18T04:13:49.003Z","origins":[{"source":"mitre","sourceId":"WPScan","modified":"2026-07-18T04:13:49.003Z","url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/"},{"source":"nvd","sourceId":"CVE-2026-60137","modified":"2026-10-08T10:35:47.777","url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:16:21.040Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T18:16:21.040Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137"},{"source":"nvd","sourceId":"CVE-2026-60137","modified":"2026-10-08T10:35:47.777","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137"}]},{"source":"euvd","sourceId":"EUVD-2026-45279","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45279","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-45279","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45279"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://patchstack.com/database/wordpress/plugin/wordpress/vulnerability/wordpress-core-7-0-2-unauthenticated-sql-injection-vulnerability","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://patchstack.com/database/wordpress/plugin/wordpress/vulnerability/wordpress-core-7-0-2-unauthenticated-sql-injection-vulnerability"}]},{"url":"https://previdian.com/CVE-2026-60137","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://previdian.com/CVE-2026-60137"}]},{"url":"https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137"}]},{"url":"https://x.com/kmkz_security/status/2079212253434323246","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://x.com/kmkz_security/status/2079212253434323246"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.crowdsec.net/vulntracking-report/cve-2026-63030-wordpress-wp2shell-sqli-to-rce","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.crowdsec.net/vulntracking-report/cve-2026-63030-wordpress-wp2shell-sqli-to-rce"}]},{"url":"https://fortiguard.fortinet.com/threat-signal-report/6492","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://fortiguard.fortinet.com/threat-signal-report/6492"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/wp2shell-rce","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/wp2shell-rce"}]},{"url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"url":"https://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation"}]},{"url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape"}]},{"url":"https://vulncheck.com/xdb/0cb204211eff","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0cb204211eff","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0cb204211eff","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/0cb204211eff"}]},{"url":"https://github.com/0xsha/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0cb204211eff","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0cb204211eff","modified":"2026-07-17T00:00:00Z","url":"https://github.com/0xsha/wp2shell"}]},{"url":"https://vulncheck.com/xdb/226a2304a8c3","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"226a2304a8c3","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"226a2304a8c3","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/226a2304a8c3"}]},{"url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"226a2304a8c3","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"226a2304a8c3","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030"}]},{"url":"https://vulncheck.com/xdb/d4aa0c56e46f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d4aa0c56e46f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d4aa0c56e46f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d4aa0c56e46f"}]},{"url":"https://github.com/h4cd0c/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d4aa0c56e46f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d4aa0c56e46f","modified":"2026-07-17T00:00:00Z","url":"https://github.com/h4cd0c/wp2shell"}]},{"url":"https://vulncheck.com/xdb/7d1ac62804c2","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7d1ac62804c2","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d1ac62804c2","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7d1ac62804c2"}]},{"url":"https://github.com/47Cid/wp2shell-lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7d1ac62804c2","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d1ac62804c2","modified":"2026-07-17T00:00:00Z","url":"https://github.com/47Cid/wp2shell-lab"}]},{"url":"https://vulncheck.com/xdb/1a4e9efa24b2","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1a4e9efa24b2","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1a4e9efa24b2","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/1a4e9efa24b2"}]},{"url":"https://github.com/ekomsSavior/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1a4e9efa24b2","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1a4e9efa24b2","modified":"2026-07-17T00:00:00Z","url":"https://github.com/ekomsSavior/wp2shell"}]},{"url":"https://vulncheck.com/xdb/78ce91ae2a55","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"78ce91ae2a55","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"78ce91ae2a55","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/78ce91ae2a55"}]},{"url":"https://github.com/0xWhoknows/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"78ce91ae2a55","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"78ce91ae2a55","modified":"2026-07-17T00:00:00Z","url":"https://github.com/0xWhoknows/wp2shell"}]},{"url":"https://vulncheck.com/xdb/e4157426ef4d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e4157426ef4d","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4157426ef4d","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e4157426ef4d"}]},{"url":"https://github.com/Icex0/wp2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e4157426ef4d","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4157426ef4d","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Icex0/wp2shell-poc"}]},{"url":"https://vulncheck.com/xdb/e2c2a89ee1a1","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e2c2a89ee1a1","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e2c2a89ee1a1","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e2c2a89ee1a1"}]},{"url":"https://github.com/dinosn/wp2shell-lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e2c2a89ee1a1","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e2c2a89ee1a1","modified":"2026-07-17T00:00:00Z","url":"https://github.com/dinosn/wp2shell-lab"}]},{"url":"https://vulncheck.com/xdb/4b2de6418d11","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4b2de6418d11","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4b2de6418d11","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/4b2de6418d11"}]},{"url":"https://github.com/yoerivegt/wp2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4b2de6418d11","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4b2de6418d11","modified":"2026-07-17T00:00:00Z","url":"https://github.com/yoerivegt/wp2shell-poc"}]},{"url":"https://vulncheck.com/xdb/474f98ad41b0","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"474f98ad41b0","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"474f98ad41b0","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/474f98ad41b0"}]},{"url":"https://github.com/securelayer7/WordPresShell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"474f98ad41b0","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"474f98ad41b0","modified":"2026-07-17T00:00:00Z","url":"https://github.com/securelayer7/WordPresShell"}]},{"url":"https://vulncheck.com/xdb/353ec0331b42","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"353ec0331b42","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"353ec0331b42","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/353ec0331b42"}]},{"url":"https://github.com/ikow/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"353ec0331b42","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"353ec0331b42","modified":"2026-07-17T00:00:00Z","url":"https://github.com/ikow/wp2shell"}]},{"url":"https://vulncheck.com/xdb/d25894558c3a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d25894558c3a","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d25894558c3a","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d25894558c3a"}]},{"url":"https://github.com/bahartanir/wp2shell-scanner","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d25894558c3a","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d25894558c3a","modified":"2026-07-17T00:00:00Z","url":"https://github.com/bahartanir/wp2shell-scanner"}]},{"url":"https://vulncheck.com/xdb/7aadbc15707f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7aadbc15707f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7aadbc15707f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7aadbc15707f"}]},{"url":"https://github.com/JohenLastGen-JLG/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7aadbc15707f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7aadbc15707f","modified":"2026-07-17T00:00:00Z","url":"https://github.com/JohenLastGen-JLG/wp2shell"}]},{"url":"https://vulncheck.com/xdb/4bf1d8157b51","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4bf1d8157b51","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4bf1d8157b51","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/4bf1d8157b51"}]},{"url":"https://github.com/Crypto-Cat/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4bf1d8157b51","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4bf1d8157b51","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Crypto-Cat/wp2shell"}]},{"url":"https://vulncheck.com/xdb/dff8db34058c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"dff8db34058c","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dff8db34058c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/dff8db34058c"}]},{"url":"https://github.com/hidden-investigations/wp2shell-scanner","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"dff8db34058c","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dff8db34058c","modified":"2026-07-17T00:00:00Z","url":"https://github.com/hidden-investigations/wp2shell-scanner"}]},{"url":"https://vulncheck.com/xdb/5f03cb94af76","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5f03cb94af76","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5f03cb94af76","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/5f03cb94af76"}]},{"url":"https://github.com/SentinelXofficial/sxwp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5f03cb94af76","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5f03cb94af76","modified":"2026-07-17T00:00:00Z","url":"https://github.com/SentinelXofficial/sxwp2shell"}]},{"url":"https://vulncheck.com/xdb/97709737ec53","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"97709737ec53","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"97709737ec53","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/97709737ec53"}]},{"url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"97709737ec53","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"97709737ec53","modified":"2026-07-17T00:00:00Z","url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN"}]},{"url":"https://vulncheck.com/xdb/09cb4f5a2c2c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"09cb4f5a2c2c","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"09cb4f5a2c2c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/09cb4f5a2c2c"}]},{"url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"09cb4f5a2c2c","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"09cb4f5a2c2c","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC"}]},{"url":"https://vulncheck.com/xdb/f2f54ce3e993","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f2f54ce3e993","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f2f54ce3e993","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/f2f54ce3e993"}]},{"url":"https://github.com/mcipekci/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f2f54ce3e993","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f2f54ce3e993","modified":"2026-07-17T00:00:00Z","url":"https://github.com/mcipekci/wp2shell"}]},{"url":"https://vulncheck.com/xdb/3c9b621bdac9","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3c9b621bdac9","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3c9b621bdac9","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3c9b621bdac9"}]},{"url":"https://github.com/Colere-Sys/wp2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3c9b621bdac9","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3c9b621bdac9","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Colere-Sys/wp2shell-poc"}]},{"url":"https://vulncheck.com/xdb/d3f711daf1da","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d3f711daf1da","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d3f711daf1da","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d3f711daf1da"}]},{"url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d3f711daf1da","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d3f711daf1da","modified":"2026-07-17T00:00:00Z","url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc"}]},{"url":"https://vulncheck.com/xdb/ca529c35966e","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ca529c35966e","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ca529c35966e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/ca529c35966e"}]},{"url":"https://github.com/wn-iqbal/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ca529c35966e","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ca529c35966e","modified":"2026-07-17T00:00:00Z","url":"https://github.com/wn-iqbal/wp2shell"}]},{"url":"https://vulncheck.com/xdb/f489267fbeea","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f489267fbeea","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f489267fbeea","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/f489267fbeea"}]},{"url":"https://github.com/shinthink/CVE-2026-63030","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f489267fbeea","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f489267fbeea","modified":"2026-07-17T00:00:00Z","url":"https://github.com/shinthink/CVE-2026-63030"}]},{"url":"https://vulncheck.com/xdb/cf809f79dd13","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"cf809f79dd13","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cf809f79dd13","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/cf809f79dd13"}]},{"url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"cf809f79dd13","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cf809f79dd13","modified":"2026-07-17T00:00:00Z","url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137"}]},{"url":"https://vulncheck.com/xdb/7d44b20ca038","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7d44b20ca038","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d44b20ca038","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7d44b20ca038"}]},{"url":"https://github.com/yuag/wp2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7d44b20ca038","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d44b20ca038","modified":"2026-07-17T00:00:00Z","url":"https://github.com/yuag/wp2shell"}]},{"url":"https://vulncheck.com/xdb/6ffd09f55538","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6ffd09f55538","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6ffd09f55538","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/6ffd09f55538"}]},{"url":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6ffd09f55538","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6ffd09f55538","modified":"2026-07-17T00:00:00Z","url":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL"}]},{"url":"https://vulncheck.com/xdb/61645873641f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"61645873641f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"61645873641f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/61645873641f"}]},{"url":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"61645873641f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"61645873641f","modified":"2026-07-17T00:00:00Z","url":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137"}]},{"url":"https://vulncheck.com/xdb/aacebc68216d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"aacebc68216d","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"aacebc68216d","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/aacebc68216d"}]},{"url":"https://github.com/johnlodan/wp2shell-rce","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"aacebc68216d","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"aacebc68216d","modified":"2026-07-17T00:00:00Z","url":"https://github.com/johnlodan/wp2shell-rce"}]},{"url":"https://vulncheck.com/xdb/43bc49db3c7b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"43bc49db3c7b","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"43bc49db3c7b","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/43bc49db3c7b"}]},{"url":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"43bc49db3c7b","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"43bc49db3c7b","modified":"2026-07-17T00:00:00Z","url":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC"}]},{"url":"https://vulncheck.com/xdb/68469fc185b9","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"68469fc185b9","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"68469fc185b9","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/68469fc185b9"}]},{"url":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"68469fc185b9","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"68469fc185b9","modified":"2026-07-17T00:00:00Z","url":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass"}]},{"url":"https://vulncheck.com/xdb/d5051e1b946b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d5051e1b946b","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d5051e1b946b","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d5051e1b946b"}]},{"url":"https://github.com/DeadExpl0it/wp2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d5051e1b946b","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d5051e1b946b","modified":"2026-07-17T00:00:00Z","url":"https://github.com/DeadExpl0it/wp2shell-poc"}]},{"url":"https://vulncheck.com/xdb/3e923a05b99e","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3e923a05b99e","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e923a05b99e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3e923a05b99e"}]},{"url":"https://github.com/fl0ydsec/CVE-2026-63030","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3e923a05b99e","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e923a05b99e","modified":"2026-07-17T00:00:00Z","url":"https://github.com/fl0ydsec/CVE-2026-63030"}]},{"url":"https://vulncheck.com/xdb/93cd00b87991","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"93cd00b87991","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"93cd00b87991","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/93cd00b87991"}]},{"url":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"93cd00b87991","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"93cd00b87991","modified":"2026-07-17T00:00:00Z","url":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab"}]},{"url":"https://vulncheck.com/xdb/1def4aa2196f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1def4aa2196f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1def4aa2196f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/1def4aa2196f"}]},{"url":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1def4aa2196f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1def4aa2196f","modified":"2026-07-17T00:00:00Z","url":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-"}]},{"url":"https://vulncheck.com/xdb/b743b83f252f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b743b83f252f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b743b83f252f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/b743b83f252f"}]},{"url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b743b83f252f","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b743b83f252f","modified":"2026-07-17T00:00:00Z","url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/h4cd0c/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7.0.0–7.0.1.","modified":"2026-07-18T16:41:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/h4cd0c/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-07-18T16:41:06Z","url":"https://github.com/h4cd0c/wp2shell"}],"tags":[]},{"url":"https://github.com/codeb0ssx/Ultimate-wp2shell","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7.0.0–7.0.1.","modified":"2026-08-09T13:01:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/codeb0ssx/Ultimate-wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-08-09T13:01:37Z","url":"https://github.com/codeb0ssx/Ultimate-wp2shell"}],"tags":[]},{"url":"https://github.com/mrmtwoj/Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"CVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)","modified":"2026-07-21T17:49:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/mrmtwoj/Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-07-21T17:49:07Z","url":"https://github.com/mrmtwoj/Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress"}],"tags":[]},{"url":"https://github.com/Colere-Sys/wp2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030","modified":"2026-10-15T01:23:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/Colere-Sys/wp2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-10-15T01:23:42Z","url":"https://github.com/Colere-Sys/wp2shell-poc"}],"tags":[]},{"url":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"Adding --insecure to skip ssl","modified":"2026-07-26T11:53:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-07-26T11:53:40Z","url":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL"}],"tags":[]},{"url":"https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-07-27T04:11:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-07-27T04:11:11Z","url":"https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/michael-kanda/Wp2shell-ioc-scanner","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.","modified":"2026-08-03T11:21:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/michael-kanda/Wp2shell-ioc-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-08-03T11:21:46Z","url":"https://github.com/michael-kanda/Wp2shell-ioc-scanner"}],"tags":[]},{"url":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"wpsqli  full SQLi extractor + dumper for CVE-2026-60137","modified":"2026-08-03T08:55:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-08-03T08:55:46Z","url":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137"}],"tags":[]},{"url":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC","source":"poc-in-github","sourceId":"CVE-2026-60137","description":"Non-destructive proof-of-concept and verification harness for CVE-2026-60137, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_exclude` parameter.","modified":"2026-08-05T00:16:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-08-05T00:16:17Z","url":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC"}],"tags":[]},{"url":"https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-09-10T07:22:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-09-10T07:22:49Z","url":"https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/BIBILZERODAY/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC","source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-10-16T20:38:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-60137","url":"https://github.com/BIBILZERODAY/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-60137","modified":"2026-10-16T20:38:55Z","url":"https://github.com/BIBILZERODAY/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb","source":"metasploit","sourceId":"exploit/multi/http/wp_batch_desync_rce","description":"WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE","modified":"2026-08-06 12:35:36 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/wp_batch_desync_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/wp_batch_desync_rce","modified":"2026-08-06 12:35:36 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0cb204211eff","url":"https://vulncheck.com/xdb/0cb204211eff","cve":"CVE-2026-60137","dateAdded":"2026-07-18T14:27:41Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xsha/wp2shell","observations":[{"dateAdded":"2026-07-18T14:27:41Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0cb204211eff","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/0cb204211eff"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"226a2304a8c3","url":"https://vulncheck.com/xdb/226a2304a8c3","cve":"CVE-2026-60137","dateAdded":"2026-07-18T19:50:50Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Senanfurkan/wordpress-cve-2026-63030","observations":[{"dateAdded":"2026-07-18T19:50:50Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"226a2304a8c3","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/226a2304a8c3"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d4aa0c56e46f","url":"https://vulncheck.com/xdb/d4aa0c56e46f","cve":"CVE-2026-60137","dateAdded":"2026-07-18T19:53:35Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/h4cd0c/wp2shell","observations":[{"dateAdded":"2026-07-18T19:53:35Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d4aa0c56e46f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d4aa0c56e46f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7d1ac62804c2","url":"https://vulncheck.com/xdb/7d1ac62804c2","cve":"CVE-2026-60137","dateAdded":"2026-07-18T19:54:58Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/47Cid/wp2shell-lab","observations":[{"dateAdded":"2026-07-18T19:54:58Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7d1ac62804c2","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7d1ac62804c2"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1a4e9efa24b2","url":"https://vulncheck.com/xdb/1a4e9efa24b2","cve":"CVE-2026-60137","dateAdded":"2026-07-18T20:01:57Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/ekomsSavior/wp2shell","observations":[{"dateAdded":"2026-07-18T20:01:57Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1a4e9efa24b2","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/1a4e9efa24b2"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"78ce91ae2a55","url":"https://vulncheck.com/xdb/78ce91ae2a55","cve":"CVE-2026-60137","dateAdded":"2026-07-18T20:08:58Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xWhoknows/wp2shell","observations":[{"dateAdded":"2026-07-18T20:08:58Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"78ce91ae2a55","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/78ce91ae2a55"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e4157426ef4d","url":"https://vulncheck.com/xdb/e4157426ef4d","cve":"CVE-2026-60137","dateAdded":"2026-07-18T20:10:22Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Icex0/wp2shell-poc","observations":[{"dateAdded":"2026-07-18T20:10:22Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e4157426ef4d","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e4157426ef4d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e2c2a89ee1a1","url":"https://vulncheck.com/xdb/e2c2a89ee1a1","cve":"CVE-2026-60137","dateAdded":"2026-07-18T20:14:36Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/dinosn/wp2shell-lab","observations":[{"dateAdded":"2026-07-18T20:14:36Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e2c2a89ee1a1","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e2c2a89ee1a1"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4b2de6418d11","url":"https://vulncheck.com/xdb/4b2de6418d11","cve":"CVE-2026-60137","dateAdded":"2026-07-18T21:00:27Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/yoerivegt/wp2shell-poc","observations":[{"dateAdded":"2026-07-18T21:00:27Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4b2de6418d11","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/4b2de6418d11"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"474f98ad41b0","url":"https://vulncheck.com/xdb/474f98ad41b0","cve":"CVE-2026-60137","dateAdded":"2026-07-18T21:01:48Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/securelayer7/WordPresShell","observations":[{"dateAdded":"2026-07-18T21:01:48Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"474f98ad41b0","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/474f98ad41b0"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"353ec0331b42","url":"https://vulncheck.com/xdb/353ec0331b42","cve":"CVE-2026-60137","dateAdded":"2026-07-19T10:50:56Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/ikow/wp2shell","observations":[{"dateAdded":"2026-07-19T10:50:56Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"353ec0331b42","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/353ec0331b42"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d25894558c3a","url":"https://vulncheck.com/xdb/d25894558c3a","cve":"CVE-2026-60137","dateAdded":"2026-07-19T10:56:25Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/bahartanir/wp2shell-scanner","observations":[{"dateAdded":"2026-07-19T10:56:25Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d25894558c3a","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d25894558c3a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7aadbc15707f","url":"https://vulncheck.com/xdb/7aadbc15707f","cve":"CVE-2026-60137","dateAdded":"2026-07-19T10:57:46Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/JohenLastGen-JLG/wp2shell","observations":[{"dateAdded":"2026-07-19T10:57:46Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7aadbc15707f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7aadbc15707f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4bf1d8157b51","url":"https://vulncheck.com/xdb/4bf1d8157b51","cve":"CVE-2026-60137","dateAdded":"2026-07-19T21:51:28Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Crypto-Cat/wp2shell","observations":[{"dateAdded":"2026-07-19T21:51:28Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4bf1d8157b51","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/4bf1d8157b51"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"dff8db34058c","url":"https://vulncheck.com/xdb/dff8db34058c","cve":"CVE-2026-60137","dateAdded":"2026-07-20T10:58:00Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/hidden-investigations/wp2shell-scanner","observations":[{"dateAdded":"2026-07-20T10:58:00Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"dff8db34058c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/dff8db34058c"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5f03cb94af76","url":"https://vulncheck.com/xdb/5f03cb94af76","cve":"CVE-2026-60137","dateAdded":"2026-07-20T11:49:36Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/SentinelXofficial/sxwp2shell","observations":[{"dateAdded":"2026-07-20T11:49:36Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5f03cb94af76","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/5f03cb94af76"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"97709737ec53","url":"https://vulncheck.com/xdb/97709737ec53","cve":"CVE-2026-60137","dateAdded":"2026-07-21T17:05:53Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN","observations":[{"dateAdded":"2026-07-21T17:05:53Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"97709737ec53","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/97709737ec53"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"09cb4f5a2c2c","url":"https://vulncheck.com/xdb/09cb4f5a2c2c","cve":"CVE-2026-60137","dateAdded":"2026-07-22T14:51:10Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","observations":[{"dateAdded":"2026-07-22T14:51:10Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"09cb4f5a2c2c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/09cb4f5a2c2c"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f2f54ce3e993","url":"https://vulncheck.com/xdb/f2f54ce3e993","cve":"CVE-2026-60137","dateAdded":"2026-07-22T14:52:38Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/mcipekci/wp2shell","observations":[{"dateAdded":"2026-07-22T14:52:38Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f2f54ce3e993","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/f2f54ce3e993"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3c9b621bdac9","url":"https://vulncheck.com/xdb/3c9b621bdac9","cve":"CVE-2026-60137","dateAdded":"2026-07-22T15:07:49Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Colere-Sys/wp2shell-poc","observations":[{"dateAdded":"2026-07-22T15:07:49Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3c9b621bdac9","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3c9b621bdac9"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d3f711daf1da","url":"https://vulncheck.com/xdb/d3f711daf1da","cve":"CVE-2026-60137","dateAdded":"2026-07-22T23:51:13Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","observations":[{"dateAdded":"2026-07-22T23:51:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d3f711daf1da","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d3f711daf1da"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ca529c35966e","url":"https://vulncheck.com/xdb/ca529c35966e","cve":"CVE-2026-60137","dateAdded":"2026-07-23T00:49:39Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/wn-iqbal/wp2shell","observations":[{"dateAdded":"2026-07-23T00:49:39Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ca529c35966e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/ca529c35966e"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f489267fbeea","url":"https://vulncheck.com/xdb/f489267fbeea","cve":"CVE-2026-60137","dateAdded":"2026-07-24T19:09:16Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/shinthink/CVE-2026-63030","observations":[{"dateAdded":"2026-07-24T19:09:16Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f489267fbeea","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/f489267fbeea"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"cf809f79dd13","url":"https://vulncheck.com/xdb/cf809f79dd13","cve":"CVE-2026-60137","dateAdded":"2026-07-24T19:15:20Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137","observations":[{"dateAdded":"2026-07-24T19:15:20Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"cf809f79dd13","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/cf809f79dd13"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7d44b20ca038","url":"https://vulncheck.com/xdb/7d44b20ca038","cve":"CVE-2026-60137","dateAdded":"2026-07-27T08:49:30Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/yuag/wp2shell","observations":[{"dateAdded":"2026-07-27T08:49:30Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7d44b20ca038","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7d44b20ca038"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6ffd09f55538","url":"https://vulncheck.com/xdb/6ffd09f55538","cve":"CVE-2026-60137","dateAdded":"2026-07-27T08:52:28Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/northsia/CVE-2026-60137-With-Skip-SSL","observations":[{"dateAdded":"2026-07-27T08:52:28Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6ffd09f55538","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/6ffd09f55538"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"61645873641f","url":"https://vulncheck.com/xdb/61645873641f","cve":"CVE-2026-60137","dateAdded":"2026-08-03T08:39:55Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/AdarshThakur14777-cyber/CVE-2026-60137","observations":[{"dateAdded":"2026-08-03T08:39:55Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"61645873641f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/61645873641f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"aacebc68216d","url":"https://vulncheck.com/xdb/aacebc68216d","cve":"CVE-2026-60137","dateAdded":"2026-08-04T17:55:14Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/johnlodan/wp2shell-rce","observations":[{"dateAdded":"2026-08-04T17:55:14Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"aacebc68216d","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/aacebc68216d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"43bc49db3c7b","url":"https://vulncheck.com/xdb/43bc49db3c7b","cve":"CVE-2026-60137","dateAdded":"2026-08-05T00:11:15Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC","observations":[{"dateAdded":"2026-08-05T00:11:15Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"43bc49db3c7b","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/43bc49db3c7b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"68469fc185b9","url":"https://vulncheck.com/xdb/68469fc185b9","cve":"CVE-2026-60137","dateAdded":"2026-08-10T11:52:34Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass","observations":[{"dateAdded":"2026-08-10T11:52:34Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"68469fc185b9","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/68469fc185b9"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d5051e1b946b","url":"https://vulncheck.com/xdb/d5051e1b946b","cve":"CVE-2026-60137","dateAdded":"2026-08-21T13:53:28Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/DeadExpl0it/wp2shell-poc","observations":[{"dateAdded":"2026-08-21T13:53:28Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d5051e1b946b","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d5051e1b946b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3e923a05b99e","url":"https://vulncheck.com/xdb/3e923a05b99e","cve":"CVE-2026-60137","dateAdded":"2026-09-25T15:34:37Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/fl0ydsec/CVE-2026-63030","observations":[{"dateAdded":"2026-09-25T15:34:37Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3e923a05b99e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3e923a05b99e"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"93cd00b87991","url":"https://vulncheck.com/xdb/93cd00b87991","cve":"CVE-2026-60137","dateAdded":"2026-09-28T08:02:11Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab","observations":[{"dateAdded":"2026-09-28T08:02:11Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"93cd00b87991","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/93cd00b87991"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1def4aa2196f","url":"https://vulncheck.com/xdb/1def4aa2196f","cve":"CVE-2026-60137","dateAdded":"2026-09-30T00:03:30Z","modified":"2026-07-17T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-","observations":[{"dateAdded":"2026-09-30T00:03:30Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1def4aa2196f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/1def4aa2196f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b743b83f252f","url":"https://vulncheck.com/xdb/b743b83f252f","cve":"CVE-2026-60137","dateAdded":"2026-10-13T11:06:42Z","modified":"2026-07-17T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL","observations":[{"dateAdded":"2026-10-13T11:06:42Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b743b83f252f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/b743b83f252f"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-45279","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45279","dateAdded":"2026-07-21","origins":[{"source":"euvd","sourceId":"EUVD-2026-45279","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45279"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-07-17T00:00:00Z","modified":"2026-07-17T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"WordPress","product":"Core","dueDate":"2026-08-04T00:00:00Z","cisaDateAdded":"2026-07-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://patchstack.com/database/wordpress/plugin/wordpress/vulnerability/wordpress-core-7-0-2-unauthenticated-sql-injection-vulnerability","dateAdded":"2026-07-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://patchstack.com/database/wordpress/plugin/wordpress/vulnerability/wordpress-core-7-0-2-unauthenticated-sql-injection-vulnerability"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-60137","dateAdded":"2026-07-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://previdian.com/CVE-2026-60137"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137","dateAdded":"2026-07-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137"},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://x.com/kmkz_security/status/2079212253434323246"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-07-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.crowdsec.net/vulntracking-report/cve-2026-63030-wordpress-wp2shell-sqli-to-rce","dateAdded":"2026-07-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.crowdsec.net/vulntracking-report/cve-2026-63030-wordpress-wp2shell-sqli-to-rce"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/threat-signal-report/6492","dateAdded":"2026-07-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://fortiguard.fortinet.com/threat-signal-report/6492"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/wp2shell-rce","dateAdded":"2026-07-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://fortiguard.fortinet.com/outbreak-alert/wp2shell-rce"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","dateAdded":"2026-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation","dateAdded":"2026-09-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape","dateAdded":"2026-10-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-60137","url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape"}]}]}