articleas affected products2026-10-30
articleas affected products2026-10-30
advisoryas affected products2026-10-28
threadas affected products2026-10-26It is written here as WordPress (covered in production-grade update).
covered in production-grade update
writeupas affected products2026-10-26It is written here as WordPress (ordinary site compromised in Orca's test).
ordinary site compromised in Orca's test
articleas classification.technologies2026-10-23
articleas classification.technologies2026-10-22
articleas classification.technologies2026-10-22
articleas affected products2026-10-21It is written here as WordPress (unauthenticated RCE confirmed 21 August 2026).
unauthenticated RCE confirmed 21 August 2026
articleas affected products2026-10-21It is written here as WordPress (automatic updates do not install the PHP patch; every WordPress site runs on a server using PHP).
automatic updates do not install the PHP patch; every WordPress site runs on a server using PHP
advisoryas affected products2026-10-21It is written here as WordPress (unauthenticated RCE demonstrated by Wiz researchers).
unauthenticated RCE demonstrated by Wiz researchers
articleas classification.technologies2026-10-21
articleas classification.technologies2026-10-21
advisoryas affected products2026-10-21
articleas classification.technologies2026-10-21
writeupas affected products2026-10-21It is written here as WordPress (REST API, author sitemaps, login).
REST API, author sitemaps, login
writeupas affected products2026-10-21It is written here as WordPress (wordpress:latest container image, used as a demonstration target).
wordpress:latest container image, used as a demonstration target
repoas affected products2026-10-21
Listed as a public-facing PHP application potentially affected
repoas affected products2026-10-21It is written here as WordPress (page states 43% of websites).
page states 43% of websites
advisoryas classification.technologies2026-10-21
articleas classification.technologies2026-10-19
articleas affected products2026-10-15It is written here as WordPress (wp-config.php credentials targeted).
wp-config.php credentials targeted
repoas classification.technologies2026-10-15
threadas classification.technologies2026-10-15
articleas classification.technologies2026-10-14
articleas affected products2026-10-12
advisoryas classification.technologies2026-10-11
articleas classification.technologies2026-10-10
advisoryas classification.technologies2026-10-10
articleas affected products2026-10-09
Targeted by MicroScan vulnerability scanning
writeupas classification.technologies2026-09-29
articleas affected products2026-09-28It is written here as WordPress (versions before 7.1.2).
Affected by CVE-2026-87902, local file inclusion vulnerability being actively exploited.
writeupas affected products2026-09-25
Sensitive administration paths probed on Azure App Service targets
repoas affected products2026-09-23
exposure scanning covered by AKCA
advisoryas classification.technologies2026-09-22
advisoryas affected products2026-09-22
writeupas affected products2026-09-22
Blog DB credentials found in wp-config.php on NFS; admin user created via DB write; plugin upload used for RCE on blog host
writeupas classification.technologies2026-09-18
repoas affected products2026-09-15
plugins and themes; multisite and WooCommerce usage mentioned
writeupas affected products2026-08-31
Site affected by CVE-2026-18322, used as initial compromise vector
advisoryas classification.technologies2026-08-20
writeupas classification.technologies2026-08-18
repoas affected products2026-08-15
articleas classification.technologies2026-08-13
repoas classification.technologies2026-07-25
videoas technologies2026-07-23
articleas classification.technologies2026-07-22
articleas classification.technologies2026-07-21
articleas classification.technologies2026-07-21
writeupas classification.technologies2026-07-20
writeupas classification.technologies2026-07-17
repoas affected products2026-07-17
unauthenticated REST batch route-confusion leading to SQL injection and pre-auth RCE (wp2shell)
repoas classification.technologies2026-06-14
writeupas classification.technologies2026-06-13
advisoryas classification.technologies2026-06-03
toolas classification.technologies2026-05-16
writeupas affected products2024-06-17
test setup used to host webshells for hunting exercise
writeupas affected products2024-04-14
Referenced as targeted by Sysrv-Hello botnet per sysdig.com blog post, and observed exploit within the analyzed sample aimed at a WordPress site
articleas classification.technologies
writeupas classification.technologies
articleas classification.technologies
advisoryas affected products
Requires active child or parent theme with a top-level directory whose name starts with page- (e.g., page-templates), and a chosen local .php target file readable by the web server account (e.g., pearcmd.php)
otheras classification.technologies
paperas affected products
evaluated as target codebase for vulnerability discovery
repoas affected products
listed as tech-specific scanner target / CMS fingerprinting
articleas classification.technologies
advisoryas classification.technologies