wordpress

2 posts

wp2shell: Unpacking the WordPress Batch API Desync That Led to Pre-Auth RCE

A root-cause breakdown of CVE-2026-63030 and CVE-2026-60137, the array-desync bug in WordPress's REST batch endpoint that chains into SQLi and full unauthenticated site takeover.

2026-07-25·7 min read

wordpresssqlirce

SSRF via WordPress XML-RPC Pingback: A Recurring Finding

How we found and confirmed SSRF and brute-force amplification through a decade-old WordPress endpoint during a recent web assessment.

2026-06-10·5 min read

ssrfwordpressweb