2 independently sourced, verified news trends involving WordPress.
This hub is built from stories supported by at least four independent sources and accepted by Newsylist's verification pass. Qualifying coverage spans 1 news category, from Jul 18, 2026 through Jul 21, 2026.
Open any card for the source list, timeline and coverage-velocity evidence. Raw detections and extractive-only records are excluded from this page.
A vulnerability identified as 'WP2Shell' is facilitating remote takeovers of millions of WordPress sites, drawing urgent warnings from security researchers.
A critical remote code execution flaw dubbed 'wp2shell' allows unauthenticated attackers to run code within WordPress Core via SQL injection.