Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code
Excerpt
A critical pre-authentication remote code execution (RCE) vulnerability in WordPress Core, dubbed “wp2shell.” The flaw requires no preconditions and can be exploited by an anonymous attacker against a stock WordPress installation with zero plugins active, putting a significant chunk of the estimated 500 million WordPress-powered websites at immediate risk . Critical WordPress wp2shell Flaw The bug, discovered by Adam Kues of Assetnote, stems from a REST API…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | wp2shell.com | High | Score 58/100 | First seen |
| CVE | CVE-2026-63030 | High | Score 78/100 | First seen |
| CVE | CVE-2026-60137 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…