Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
WordPress Remote Code Execution Vulnerability (CVE-2026-63030/CVE-2026-60137) Notice
Excerpt
Overview Recently, NSFOCUS CERT detected that WordPress issued a security bulletin to fix the WordPress remote code execution vulnerability (CVE-2026-63030/CVE-2026-60137), known as wp2shell; Unauthenticated attackers can bypass authentication through REST API batch requests, use SQL injection to obtain administrator password hashes, and use plug-in installation functions to implant WebShell to achieve remote code execution. The CVSS score is 9.8. At present, the…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-63030 | High | Score 78/100 | First seen |
| CVE | CVE-2026-60137 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…