WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Published on July 18, 2026

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. [...]

Continue reading on website
Other news

Microsoft warns of surge in ACR Stealer attacks on customers

July 18, 2026
Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. [...]

Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

July 18, 2026
7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. [...]