{"schema":"vulnpedia.poc/1","cve":"CVE-2026-63030","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-21","ransomware":false},"epss":{"score":0.10649,"percentile":0.95766},"cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb","executable":true,"sourceId":"exploit/multi/http/wp_batch_desync_rce","description":"WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE","verification":"catalogued","source":"metasploit","modified":"2026-08-06 12:35:36 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/wp_batch_desync_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/wp_batch_desync_rce","modified":"2026-08-06 12:35:36 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3ceb02ef656a","executable":false,"sourceId":"3ceb02ef656a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3ceb02ef656a","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3ceb02ef656a"}],"repositoryUrl":"https://github.com/Senanfurkan/wordpress-cve-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7eab346d6260","executable":false,"sourceId":"7eab346d6260","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7eab346d6260","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7eab346d6260"}],"repositoryUrl":"https://github.com/NULL200OK/WP2Shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b733ce85b287","executable":false,"sourceId":"b733ce85b287","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b733ce85b287","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/b733ce85b287"}],"repositoryUrl":"https://github.com/h4cd0c/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5a4dfe2f0910","executable":false,"sourceId":"5a4dfe2f0910","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5a4dfe2f0910","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/5a4dfe2f0910"}],"repositoryUrl":"https://github.com/0xWhoknows/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/10808d9e73c0","executable":false,"sourceId":"10808d9e73c0","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"10808d9e73c0","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/10808d9e73c0"}],"repositoryUrl":"https://github.com/attackercan/wp2shell-poc2"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c229388b4517","executable":false,"sourceId":"c229388b4517","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c229388b4517","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/c229388b4517"}],"repositoryUrl":"https://github.com/47Cid/wp2shell-lab"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d747655380f6","executable":false,"sourceId":"d747655380f6","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d747655380f6","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d747655380f6"}],"repositoryUrl":"https://github.com/securelayer7/WordPresShell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8c29f2e09796","executable":false,"sourceId":"8c29f2e09796","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8c29f2e09796","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/8c29f2e09796"}],"repositoryUrl":"https://github.com/0xsha/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/98c3d3a11ea8","executable":false,"sourceId":"98c3d3a11ea8","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"98c3d3a11ea8","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/98c3d3a11ea8"}],"repositoryUrl":"https://github.com/mrx-arafat/CVE-2026-63030-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e32cda881d69","executable":false,"sourceId":"e32cda881d69","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e32cda881d69","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e32cda881d69"}],"repositoryUrl":"https://github.com/4minx/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ef1c955d04ac","executable":false,"sourceId":"ef1c955d04ac","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ef1c955d04ac","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/ef1c955d04ac"}],"repositoryUrl":"https://github.com/ekomsSavior/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8dbd04a4715c","executable":false,"sourceId":"8dbd04a4715c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8dbd04a4715c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/8dbd04a4715c"}],"repositoryUrl":"https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0e155f021cb0","executable":false,"sourceId":"0e155f021cb0","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0e155f021cb0","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/0e155f021cb0"}],"repositoryUrl":"https://github.com/mverschu/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/61034f32533a","executable":false,"sourceId":"61034f32533a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"61034f32533a","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/61034f32533a"}],"repositoryUrl":"https://github.com/Icex0/wp2shell-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8e380a2c7e7e","executable":false,"sourceId":"8e380a2c7e7e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8e380a2c7e7e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/8e380a2c7e7e"}],"repositoryUrl":"https://github.com/dinosn/wp2shell-lab"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1460088472db","executable":false,"sourceId":"1460088472db","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1460088472db","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/1460088472db"}],"repositoryUrl":"https://github.com/gbrsh/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2c22ab77cd0a","executable":false,"sourceId":"2c22ab77cd0a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2c22ab77cd0a","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/2c22ab77cd0a"}],"repositoryUrl":"https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9dca80693885","executable":false,"sourceId":"9dca80693885","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9dca80693885","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/9dca80693885"}],"repositoryUrl":"https://github.com/Lutfifakee-Project/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b4b379bb0c8f","executable":false,"sourceId":"b4b379bb0c8f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b4b379bb0c8f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/b4b379bb0c8f"}],"repositoryUrl":"https://github.com/0xBlackash/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/215f44b8a7b9","executable":false,"sourceId":"215f44b8a7b9","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"215f44b8a7b9","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/215f44b8a7b9"}],"repositoryUrl":"https://github.com/ChiefYoru/CVE-2026-63030_PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/aad1b5a41723","executable":false,"sourceId":"aad1b5a41723","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"aad1b5a41723","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/aad1b5a41723"}],"repositoryUrl":"https://github.com/yoerivegt/wp2shell-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5908e23870ce","executable":false,"sourceId":"5908e23870ce","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5908e23870ce","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/5908e23870ce"}],"repositoryUrl":"https://github.com/fullhunt/wp2shell-scan"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/03aa0310e804","executable":false,"sourceId":"03aa0310e804","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"03aa0310e804","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/03aa0310e804"}],"repositoryUrl":"https://github.com/JohenLastGen-JLG/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9549cbf43f25","executable":false,"sourceId":"9549cbf43f25","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9549cbf43f25","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/9549cbf43f25"}],"repositoryUrl":"https://github.com/ikow/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/eab18983fb0c","executable":false,"sourceId":"eab18983fb0c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eab18983fb0c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/eab18983fb0c"}],"repositoryUrl":"https://github.com/c0gnit00/Wp2Shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/90adf004a285","executable":false,"sourceId":"90adf004a285","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"90adf004a285","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/90adf004a285"}],"repositoryUrl":"https://github.com/bahartanir/wp2shell-scanner"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/afadcf0f8e23","executable":false,"sourceId":"afadcf0f8e23","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"afadcf0f8e23","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/afadcf0f8e23"}],"repositoryUrl":"https://github.com/mhtsec/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a075ba6e6e67","executable":false,"sourceId":"a075ba6e6e67","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a075ba6e6e67","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/a075ba6e6e67"}],"repositoryUrl":"https://github.com/Crypto-Cat/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7d95ef261acd","executable":false,"sourceId":"7d95ef261acd","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d95ef261acd","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7d95ef261acd"}],"repositoryUrl":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7bb16a1ea945","executable":false,"sourceId":"7bb16a1ea945","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7bb16a1ea945","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7bb16a1ea945"}],"repositoryUrl":"https://github.com/hidden-investigations/wp2shell-scanner"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/94d096ef3535","executable":false,"sourceId":"94d096ef3535","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"94d096ef3535","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/94d096ef3535"}],"repositoryUrl":"https://github.com/4B3R4M4-607D/CVE-2026-63030-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/355109b3ef07","executable":false,"sourceId":"355109b3ef07","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"355109b3ef07","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/355109b3ef07"}],"repositoryUrl":"https://github.com/ZenithGenius/wordpress-batch-rce-lab"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/771dab10adc6","executable":false,"sourceId":"771dab10adc6","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"771dab10adc6","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/771dab10adc6"}],"repositoryUrl":"https://github.com/0xh7ml/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/16827e184acb","executable":false,"sourceId":"16827e184acb","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"16827e184acb","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/16827e184acb"}],"repositoryUrl":"https://github.com/SentinelXofficial/sxwp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e7433f2d580c","executable":false,"sourceId":"e7433f2d580c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e7433f2d580c","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e7433f2d580c"}],"repositoryUrl":"https://github.com/ASYquan/wp2shell-cf-WAF-bypass"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3c96356b1386","executable":false,"sourceId":"3c96356b1386","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3c96356b1386","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3c96356b1386"}],"repositoryUrl":"https://github.com/Ch4120N/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/510f91fde2ed","executable":false,"sourceId":"510f91fde2ed","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"510f91fde2ed","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/510f91fde2ed"}],"repositoryUrl":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/94e81da06661","executable":false,"sourceId":"94e81da06661","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"94e81da06661","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/94e81da06661"}],"repositoryUrl":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b53ae1b8dd32","executable":false,"sourceId":"b53ae1b8dd32","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b53ae1b8dd32","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/b53ae1b8dd32"}],"repositoryUrl":"https://github.com/mcipekci/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7babea7a47dd","executable":false,"sourceId":"7babea7a47dd","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7babea7a47dd","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7babea7a47dd"}],"repositoryUrl":"https://github.com/Colere-Sys/wp2shell-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/adaf74d21df4","executable":false,"sourceId":"adaf74d21df4","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"adaf74d21df4","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/adaf74d21df4"}],"repositoryUrl":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/39ea7b7bd774","executable":false,"sourceId":"39ea7b7bd774","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"39ea7b7bd774","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/39ea7b7bd774"}],"repositoryUrl":"https://github.com/wn-iqbal/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0ccaeb7ad26f","executable":false,"sourceId":"0ccaeb7ad26f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0ccaeb7ad26f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/0ccaeb7ad26f"}],"repositoryUrl":"https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f0f468d73144","executable":false,"sourceId":"f0f468d73144","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f0f468d73144","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/f0f468d73144"}],"repositoryUrl":"https://github.com/shinthink/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/710774665a48","executable":false,"sourceId":"710774665a48","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"710774665a48","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/710774665a48"}],"repositoryUrl":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ee2aa205e633","executable":false,"sourceId":"ee2aa205e633","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ee2aa205e633","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/ee2aa205e633"}],"repositoryUrl":"https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fd81353d35a5","executable":false,"sourceId":"fd81353d35a5","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fd81353d35a5","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/fd81353d35a5"}],"repositoryUrl":"https://github.com/yuag/wp2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5f2671aa1de1","executable":false,"sourceId":"5f2671aa1de1","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5f2671aa1de1","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/5f2671aa1de1"}],"repositoryUrl":"https://github.com/rechandra/wp2exp-2026"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/659ebd00c254","executable":false,"sourceId":"659ebd00c254","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"659ebd00c254","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/659ebd00c254"}],"repositoryUrl":"https://github.com/johnlodan/wp2shell-rce"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/603cca0ff390","executable":false,"sourceId":"603cca0ff390","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"603cca0ff390","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/603cca0ff390"}],"repositoryUrl":"https://github.com/x-znn/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/99e2e5848aec","executable":false,"sourceId":"99e2e5848aec","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"99e2e5848aec","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/99e2e5848aec"}],"repositoryUrl":"https://github.com/AnggaTechI/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/69b117d497ab","executable":false,"sourceId":"69b117d497ab","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"69b117d497ab","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/69b117d497ab"}],"repositoryUrl":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/38a9cb95a56f","executable":false,"sourceId":"38a9cb95a56f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"38a9cb95a56f","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/38a9cb95a56f"}],"repositoryUrl":"https://github.com/g0d150ne/WP2Shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c9eb0d58274e","executable":false,"sourceId":"c9eb0d58274e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c9eb0d58274e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/c9eb0d58274e"}],"repositoryUrl":"https://github.com/DeadExpl0it/wp2shell-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d426c58fb6b7","executable":false,"sourceId":"d426c58fb6b7","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d426c58fb6b7","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/d426c58fb6b7"}],"repositoryUrl":"https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e69266658ea5","executable":false,"sourceId":"e69266658ea5","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e69266658ea5","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/e69266658ea5"}],"repositoryUrl":"https://github.com/fl0ydsec/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/adb42b12224e","executable":false,"sourceId":"adb42b12224e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"adb42b12224e","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/adb42b12224e"}],"repositoryUrl":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/72fc9e62b938","executable":false,"sourceId":"72fc9e62b938","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"72fc9e62b938","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/72fc9e62b938"}],"repositoryUrl":"https://github.com/langz337/CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7aa9510e9be4","executable":false,"sourceId":"7aa9510e9be4","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7aa9510e9be4","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/7aa9510e9be4"}],"repositoryUrl":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ba3a3105f4ac","executable":false,"sourceId":"ba3a3105f4ac","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ba3a3105f4ac","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/ba3a3105f4ac"}],"repositoryUrl":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3a933355d9b3","executable":false,"sourceId":"3a933355d9b3","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a933355d9b3","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/3a933355d9b3"}],"repositoryUrl":"https://github.com/Githu836/PoC-for-CVE-2026-63030"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/92e0835beab8","executable":false,"sourceId":"92e0835beab8","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"92e0835beab8","modified":"2026-07-17T00:00:00Z","url":"https://vulncheck.com/xdb/92e0835beab8"}],"repositoryUrl":"https://github.com/K52-ai/CVE-2026-63030"}],"poc_candidates":[{"url":"https://github.com/Icex0/wp2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain","modified":"2026-10-25T16:44:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Icex0/wp2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-25T16:44:49Z","url":"https://github.com/Icex0/wp2shell-poc"}],"tags":[]},{"url":"https://github.com/attackercan/wp2shell-poc2","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030","modified":"2026-08-25T20:05:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/attackercan/wp2shell-poc2"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-25T20:05:25Z","url":"https://github.com/attackercan/wp2shell-poc2"}],"tags":[]},{"url":"https://github.com/ZephrFish/wp2shell-scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030, CVE-2026-60137, wp2shell scanner","modified":"2026-10-21T19:12:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ZephrFish/wp2shell-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T19:12:35Z","url":"https://github.com/ZephrFish/wp2shell-scanner"}],"tags":[]},{"url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Pre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC.","modified":"2026-08-10T13:24:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-10T13:24:20Z","url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030"}],"tags":[]},{"url":"https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T18:54:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T18:54:43Z","url":"https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause"}],"tags":[]},{"url":"https://github.com/dinosn/wp2shell-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1","modified":"2026-10-21T19:39:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/dinosn/wp2shell-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T19:39:16Z","url":"https://github.com/dinosn/wp2shell-lab"}],"tags":[]},{"url":"https://github.com/47Cid/wp2shell-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion","modified":"2026-08-29T07:10:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/47Cid/wp2shell-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-29T07:10:17Z","url":"https://github.com/47Cid/wp2shell-lab"}],"tags":[]},{"url":"https://github.com/ekomsSavior/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi)","modified":"2026-10-16T16:26:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ekomsSavior/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-16T16:26:03Z","url":"https://github.com/ekomsSavior/wp2shell"}],"tags":[]},{"url":"https://github.com/NULL200OK/WP2Shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL queries and achieve Remote Code Execution (RCE) on vulnerable WordPress installations.","modified":"2026-10-06T00:54:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/NULL200OK/WP2Shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-06T00:54:30Z","url":"https://github.com/NULL200OK/WP2Shell"}],"tags":[]},{"url":"https://github.com/kulichr/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 (\"wp2shell\"), a pre-authentication RCE chain in WordPress core.","modified":"2026-07-18T10:08:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/kulichr/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T10:08:13Z","url":"https://github.com/kulichr/wp2shell"}],"tags":[]},{"url":"https://github.com/CybersecSpirit/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T10:22:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/CybersecSpirit/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T10:22:15Z","url":"https://github.com/CybersecSpirit/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/4minx/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 (wp2shell) POC.","modified":"2026-10-20T02:42:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/4minx/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-20T02:42:59Z","url":"https://github.com/4minx/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/mverschu/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"PoC Exploit of WordPress Core Unauthenticated RCE known as WP2Shell","modified":"2026-09-26T21:39:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/mverschu/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-26T21:39:51Z","url":"https://github.com/mverschu/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/0xsha/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core","modified":"2026-10-25T14:00:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xsha/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-25T14:00:21Z","url":"https://github.com/0xsha/wp2shell"}],"tags":[]},{"url":"https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes.","modified":"2026-10-22T08:32:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-22T08:32:51Z","url":"https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t"}],"tags":[]},{"url":"https://github.com/gbrsh/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"A critical unauthenticated \"remote code execution\" vulnerability affecting WordPress Core","modified":"2026-07-20T06:44:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/gbrsh/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-20T06:44:01Z","url":"https://github.com/gbrsh/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030","modified":"2026-07-19T21:21:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xBlackash/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T21:21:25Z","url":"https://github.com/0xBlackash/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/mrx-arafat/CVE-2026-63030-POC","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T17:21:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/mrx-arafat/CVE-2026-63030-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T17:21:31Z","url":"https://github.com/mrx-arafat/CVE-2026-63030-POC"}],"tags":[]},{"url":"https://github.com/0xWhoknows/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.","modified":"2026-07-18T19:00:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xWhoknows/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T19:00:18Z","url":"https://github.com/0xWhoknows/wp2shell"}],"tags":[]},{"url":"https://github.com/zi3lak/wp2shell_scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.","modified":"2026-07-19T06:57:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/zi3lak/wp2shell_scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T06:57:13Z","url":"https://github.com/zi3lak/wp2shell_scanner"}],"tags":[]},{"url":"https://github.com/securelayer7/WordPresShell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)","modified":"2026-10-07T16:05:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/securelayer7/WordPresShell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-07T16:05:27Z","url":"https://github.com/securelayer7/WordPresShell"}],"tags":[]},{"url":"https://github.com/fullhunt/wp2shell-scan","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core","modified":"2026-09-03T22:54:19Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/fullhunt/wp2shell-scan"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-03T22:54:19Z","url":"https://github.com/fullhunt/wp2shell-scan"}],"tags":[]},{"url":"https://github.com/ChiefYoru/CVE-2026-63030_PoC","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit","modified":"2026-07-18T20:59:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ChiefYoru/CVE-2026-63030_PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-18T20:59:27Z","url":"https://github.com/ChiefYoru/CVE-2026-63030_PoC"}],"tags":[]},{"url":"https://github.com/own2pwn-fr/wp2shell-detect","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only.","modified":"2026-09-22T17:13:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/own2pwn-fr/wp2shell-detect"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-22T17:13:44Z","url":"https://github.com/own2pwn-fr/wp2shell-detect"}],"tags":[]},{"url":"https://github.com/JohenLastGen-JLG/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)","modified":"2026-07-19T15:05:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/JohenLastGen-JLG/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T15:05:40Z","url":"https://github.com/JohenLastGen-JLG/wp2shell"}],"tags":[]},{"url":"https://github.com/c0gnit00/Wp2Shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Exploit POC for Wp2Shell,  CVE-2026-63030 + CVE-2026-63137","modified":"2026-10-22T08:36:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/c0gnit00/Wp2Shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-22T08:36:52Z","url":"https://github.com/c0gnit00/Wp2Shell"}],"tags":[]},{"url":"https://github.com/ikow/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.","modified":"2026-10-24T13:19:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ikow/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-24T13:19:40Z","url":"https://github.com/ikow/wp2shell"}],"tags":[]},{"url":"https://github.com/TomorrowX6/CVE-2026-63030-poc","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-09T14:45:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/TomorrowX6/CVE-2026-63030-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-09T14:45:36Z","url":"https://github.com/TomorrowX6/CVE-2026-63030-poc"}],"tags":[]},{"url":"https://github.com/bahartanir/wp2shell-scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner","modified":"2026-07-26T21:07:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/bahartanir/wp2shell-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-26T21:07:07Z","url":"https://github.com/bahartanir/wp2shell-scanner"}],"tags":[]},{"url":"https://github.com/eyesecurity/wp2shell-compromise-scanner-plugin","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)","modified":"2026-07-20T00:32:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/eyesecurity/wp2shell-compromise-scanner-plugin"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-20T00:32:05Z","url":"https://github.com/eyesecurity/wp2shell-compromise-scanner-plugin"}],"tags":[]},{"url":"https://github.com/0xh7ml/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T14:07:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xh7ml/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T14:07:44Z","url":"https://github.com/0xh7ml/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/4B3R4M4-607D/CVE-2026-63030-POC","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 / wp2shell","modified":"2026-10-21T16:31:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/4B3R4M4-607D/CVE-2026-63030-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T16:31:22Z","url":"https://github.com/4B3R4M4-607D/CVE-2026-63030-POC"}],"tags":[]},{"url":"https://github.com/InstaWP/wp2shell-scan","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default","modified":"2026-09-30T05:08:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/InstaWP/wp2shell-scan"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-30T05:08:51Z","url":"https://github.com/InstaWP/wp2shell-scan"}],"tags":[]},{"url":"https://github.com/hidden-investigations/wp2shell-scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.","modified":"2026-07-31T16:41:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/hidden-investigations/wp2shell-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-31T16:41:40Z","url":"https://github.com/hidden-investigations/wp2shell-scanner"}],"tags":[]},{"url":"https://github.com/ananay/wp2shell-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Validation target: minimal WordPress core slice reproducing the wp2shell (CVE-2026-63030 + CVE-2026-60137) REST-to-SQLi chain","modified":"2026-07-19T20:52:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ananay/wp2shell-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T20:52:01Z","url":"https://github.com/ananay/wp2shell-lab"}],"tags":[]},{"url":"https://github.com/Lukols-Dev/wp-cve-2026-63030-check","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).","modified":"2026-07-19T19:05:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Lukols-Dev/wp-cve-2026-63030-check"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T19:05:15Z","url":"https://github.com/Lukols-Dev/wp-cve-2026-63030-check"}],"tags":[]},{"url":"https://github.com/skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimately result in Remote Code Execution, organizations should treat remediation as an emergency.","modified":"2026-07-19T19:21:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-19T19:21:29Z","url":"https://github.com/skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/vulnquest58/PressVector","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"PressVector - Advanced WordPress Vulnerability Scanner CVE-2026-63030 (REST batch route confusion) / CVE-2026-60137 (SQLi) Developer: Vulnquest","modified":"2026-07-23T02:37:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/vulnquest58/PressVector"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-23T02:37:58Z","url":"https://github.com/vulnquest58/PressVector"}],"tags":[]},{"url":"https://github.com/ZenithGenius/wordpress-batch-rce-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030: WordPress REST batch-endpoint array desync. Mechanism, detection, mitigation, and a safe reproduction lab.","modified":"2026-08-04T10:41:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/ZenithGenius/wordpress-batch-rce-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-04T10:41:16Z","url":"https://github.com/ZenithGenius/wordpress-batch-rce-lab"}],"tags":[]},{"url":"https://github.com/Crypto-Cat/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell","modified":"2026-07-29T23:46:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Crypto-Cat/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-29T23:46:05Z","url":"https://github.com/Crypto-Cat/wp2shell"}],"tags":[]},{"url":"https://github.com/administrator-01001/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1).","modified":"2026-07-20T01:38:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/administrator-01001/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-20T01:38:20Z","url":"https://github.com/administrator-01001/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-20T10:51:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-20T10:51:02Z","url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/0xjessie21/wp2shell-checker","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)","modified":"2026-07-21T03:45:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xjessie21/wp2shell-checker"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-21T03:45:15Z","url":"https://github.com/0xjessie21/wp2shell-checker"}],"tags":[]},{"url":"https://github.com/Iqbalx7/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137)","modified":"2026-07-22T14:23:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Iqbalx7/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-22T14:23:41Z","url":"https://github.com/Iqbalx7/wp2shell"}],"tags":[]},{"url":"https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress REST API SQLi to RCE PoC (CVE-2026-63030 & CVE-2026-60137)","modified":"2026-07-21T08:17:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-21T08:17:38Z","url":"https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell"}],"tags":[]},{"url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Unauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining CVE-2026-63030 and CVE-2026-60137, potentially leading to full site compromise.","modified":"2026-07-23T09:35:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-23T09:35:44Z","url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN"}],"tags":[]},{"url":"https://github.com/Ch4120N/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 - WordPress REST Batch Route-Confusion SQL Injection Proof of Concept","modified":"2026-08-08T07:32:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Ch4120N/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-08T07:32:17Z","url":"https://github.com/Ch4120N/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"PoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.","modified":"2026-07-21T17:51:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-21T17:51:48Z","url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC"}],"tags":[]},{"url":"https://github.com/mcipekci/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.","modified":"2026-10-17T15:57:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/mcipekci/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-17T15:57:36Z","url":"https://github.com/mcipekci/wp2shell"}],"tags":[]},{"url":"https://github.com/Adrees-Basheer/wp2shell-vulnerability-scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.","modified":"2026-07-22T12:34:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Adrees-Basheer/wp2shell-vulnerability-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-22T12:34:49Z","url":"https://github.com/Adrees-Basheer/wp2shell-vulnerability-scanner"}],"tags":[]},{"url":"https://github.com/raphy76/wp2shell-poc-fulljs","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"full javascript reproduction of CVE-2026-63030 (author_exclude, author__not_in and misalignment between validations and matches)","modified":"2026-07-23T20:30:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/raphy76/wp2shell-poc-fulljs"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-23T20:30:05Z","url":"https://github.com/raphy76/wp2shell-poc-fulljs"}],"tags":[]},{"url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 & CVE-2026-60137 Wp2shell Poc","modified":"2026-07-30T22:52:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-30T22:52:01Z","url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc"}],"tags":[]},{"url":"https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction","modified":"2026-07-23T03:46:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-23T03:46:44Z","url":"https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction"}],"tags":[]},{"url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-24T09:51:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-24T09:51:01Z","url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137"}],"tags":[]},{"url":"https://github.com/shinthink/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)","modified":"2026-07-24T10:50:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/shinthink/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-24T10:50:32Z","url":"https://github.com/shinthink/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/imXur/WordPress-CVE-2026-63030-Analysis","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.","modified":"2026-07-31T20:51:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/imXur/WordPress-CVE-2026-63030-Analysis"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-31T20:51:45Z","url":"https://github.com/imXur/WordPress-CVE-2026-63030-Analysis"}],"tags":[]},{"url":"https://github.com/yuag/wp2shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 + CVE-2026-60137+poc","modified":"2026-07-27T04:52:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/yuag/wp2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-27T04:52:03Z","url":"https://github.com/yuag/wp2shell"}],"tags":[]},{"url":"https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites — per-user email reports, core file diff against clean WordPress, PHP/JS/htaccess/image analysis, and optional AI evaluation via Claude API.","modified":"2026-08-03T21:47:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-03T21:47:03Z","url":"https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner"}],"tags":[]},{"url":"https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 Exploit | by gr1tx","modified":"2026-07-30T22:38:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-07-30T22:38:34Z","url":"https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell"}],"tags":[]},{"url":"https://github.com/johnlodan/wp2shell-rce","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.","modified":"2026-08-06T02:04:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/johnlodan/wp2shell-rce"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-06T02:04:00Z","url":"https://github.com/johnlodan/wp2shell-rce"}],"tags":[]},{"url":"https://github.com/Procjevt/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-03T12:47:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Procjevt/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-03T12:47:00Z","url":"https://github.com/Procjevt/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/x-znn/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-04T11:25:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/x-znn/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-04T11:25:11Z","url":"https://github.com/x-znn/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/AnggaTechI/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress Core Pre-Auth RCE — Batch Route Confusion + SQL Injection","modified":"2026-08-27T09:50:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/AnggaTechI/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-27T09:50:11Z","url":"https://github.com/AnggaTechI/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/z3rodayhacks/CVE-2026-63030-CVE-2026-60137","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-07T01:43:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/z3rodayhacks/CVE-2026-63030-CVE-2026-60137"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-07T01:43:36Z","url":"https://github.com/z3rodayhacks/CVE-2026-63030-CVE-2026-60137"}],"tags":[]},{"url":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab","modified":"2026-08-31T22:51:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-31T22:51:08Z","url":"https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass"}],"tags":[]},{"url":"https://github.com/g0d150ne/WP2Shell","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without any credentials. ","modified":"2026-10-23T10:44:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/g0d150ne/WP2Shell"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-23T10:44:12Z","url":"https://github.com/g0d150ne/WP2Shell"}],"tags":[]},{"url":"https://github.com/0xIIDe231/wp2shell2026","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell - WordPress CVE-2026-63030 Exploit & Scanner well forked","modified":"2026-08-16T15:48:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xIIDe231/wp2shell2026"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-16T15:48:26Z","url":"https://github.com/0xIIDe231/wp2shell2026"}],"tags":[]},{"url":"https://github.com/mhassani97/cve-2026-63030-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain","modified":"2026-08-20T12:27:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/mhassani97/cve-2026-63030-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-20T12:27:20Z","url":"https://github.com/mhassani97/cve-2026-63030-lab"}],"tags":[]},{"url":"https://github.com/DeadExpl0it/wp2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"wp2shell — WordPress Core Pre-Auth RCE Chain poc for CVE-2026-63030 and CVE-2026-60137","modified":"2026-09-23T18:14:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/DeadExpl0it/wp2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-23T18:14:00Z","url":"https://github.com/DeadExpl0it/wp2shell-poc"}],"tags":[]},{"url":"https://github.com/Sec-Dan/WP2Shell-Scanner","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Read-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)","modified":"2026-08-30T18:23:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Sec-Dan/WP2Shell-Scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-08-30T18:23:35Z","url":"https://github.com/Sec-Dan/WP2Shell-Scanner"}],"tags":[]},{"url":"https://github.com/fl0ydsec/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 + CVE-2026-60137 WordPress Core pre-auth RCE mass exploit","modified":"2026-10-12T23:47:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/fl0ydsec/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-12T23:47:44Z","url":"https://github.com/fl0ydsec/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/langz337/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-26T23:17:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/langz337/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-09-26T23:17:02Z","url":"https://github.com/langz337/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.","modified":"2026-10-15T13:43:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-15T13:43:03Z","url":"https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab"}],"tags":[]},{"url":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.","modified":"2026-10-17T17:33:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-17T17:33:57Z","url":"https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-"}],"tags":[]},{"url":"https://github.com/hitechcloud-vietnam/wp2shell-PoC","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept","modified":"2026-10-03T18:49:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/hitechcloud-vietnam/wp2shell-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-03T18:49:41Z","url":"https://github.com/hitechcloud-vietnam/wp2shell-PoC"}],"tags":[]},{"url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-12T15:23:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-12T15:23:53Z","url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL"}],"tags":[]},{"url":"https://github.com/gichirimaku/wp2shell-PoC","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.","modified":"2026-10-22T18:52:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/gichirimaku/wp2shell-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-22T18:52:03Z","url":"https://github.com/gichirimaku/wp2shell-PoC"}],"tags":[]},{"url":"https://github.com/K52-ai/CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T14:20:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/K52-ai/CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T14:20:23Z","url":"https://github.com/K52-ai/CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/Githu836/PoC-for-CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T11:35:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Githu836/PoC-for-CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T11:35:42Z","url":"https://github.com/Githu836/PoC-for-CVE-2026-63030"}],"tags":[]},{"url":"https://github.com/Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030","source":"poc-in-github","sourceId":"CVE-2026-63030","description":"CVE-2026-63030 — WordPress REST API Batch-Route Confusion","modified":"2026-10-21T20:52:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-63030","url":"https://github.com/Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030"},{"source":"poc-in-github","sourceId":"CVE-2026-63030","modified":"2026-10-21T20:52:20Z","url":"https://github.com/Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-63030 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-63030/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml","template":"http/cves/2026/CVE-2026-63030.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-63030%22&type=repositories","executable":false}]}