Symbiotic Security Breaks Down WP2Shell, a WordPress Core RCE Chain SAST Misses
New analysis of WP2Shell (CVE-2026-60137, CVE-2026-63030): two safe-looking WordPress core bugs compose into unauthenticated SQL injection and RCE. Symbiotic Security today published a new technical...

