# Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

> **Newsylist Open Intelligence Dossier** · First detected: 2026-07-21 03:29 UTC · Category: Technology · Sources: 4 · Current Velocity: 2

## Executive Summary
A vulnerability identified as 'WP2Shell' is facilitating remote takeovers of millions of WordPress sites, drawing urgent warnings from security researchers.

## Intelligence Brief
Security vulnerabilities collectively known as 'WP2Shell' are being exploited in the wild. The flaws allow unauthorized actors to perform remote takeovers of affected websites.


These security gaps impact a significant number of WordPress installations. Coverage from Dark Reading, SecurityWeek, The Hacker News, and TechCrunch highlights the active nature of these exploits.


Future developments will track the rate at which administrators apply the necessary patches. Coverage does not yet specify the total number of compromised sites or the duration the vulnerability has been accessible to exploiters.

## Verified Facts & Key Claims
### What is the WP2Shell vulnerability?
It is a set of vulnerabilities in WordPress that allows for remote takeovers of websites.

### Are these vulnerabilities being exploited?
Yes, reports from SecurityWeek and other outlets confirm the bugs are being exploited in the wild.

### How many sites are at risk?
According to coverage from TechCrunch and Dark Reading, the vulnerabilities affect millions of WordPress sites.

## Key People, Organizations & Locations
Hackers, WordPress, WP2Shell Opens Millions of WordPress Sites, Remote Takeover, WP2Shell WordPress Vulnerabilities Exploited, Weekly Recap WordPress RCE SonicWall, AI Service Attacks SharePoint

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Dark Reading | 'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover | 2026-07-20 15:35 | [Source Link](https://news.google.com/rss/articles/CBMipwFBVV95cUxPcnFtU1lwOGZScm1IcFAyS29xSjVoa2t2RlBZS2xxUktMaHJQcktsRWYyaUxWalFLZkJ6dGZ4NnFnMGtoZlJldTFUeE9CcXJ5SnFjUndSSUtwRlVSZjZkTlNnNFJmNjZPYkQxb1hKOE51MER5elNNYldMU0RKbUFLb0NIMUdHUDB2M04zYUpMNFZRVGstNTVoVlJ2STFaeXZMSEhzUEE1dw?oc=5) |
| SecurityWeek | WP2Shell WordPress Vulnerabilities Exploited in the Wild | 2026-07-20 15:35 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxOWlk3WTR1QVlSZUxmdG1GRkcxWFRYSC03N3c5cEFxUm5aRExlQ01vMVl4NXFTQXg0Z1FCcjllbmhIV2cwdmhTMlR4dmYzNDBSMFV5d0hlS0w3a0JGWlpCSmd3TmpHZ3RGOGo5MVVwYTNzb29LSkJpcVp6eWhBTzlJR0FONkE1d0FvRXRlc1dqSdIBlAFBVV95cUxQenF4d0FkcEFxZE5WVGJzeFhaNDdXdFF4OGU2RmwyUnNpV2dDajlxa29ydHZtWVJhbWlDY09BRjJ3TEdzRENFbEtMWGl1MVJmdDFjOVJjcTB2SExWSmRWaXNyR3pXY3VxS1l5VUZyMWZQTW51Mll4U1pTZEJFUVhnQWc3cEJOM2JROVgtQ0ZHU1hLRFd0?oc=5) |
| The Hacker News | ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More | 2026-07-20 15:35 | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxOdDVBdERyYU0tV2ExVmhUY0V4d0VKNjZ6TlY0Yk1aa185YVpnY1hqTVU5UzBaUXNWRGxRandUbktzLVZDdkdiWmZxX19xS082OG44WWtGekFHWmlMdjRIaG5sSlBpd2NnenFPcFRWYjNRWHQ0ZVNOcG02NlpuMXp2NTVhaw?oc=5) |
| TechCrunch | Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk | 2026-07-20 15:35 | [Source Link](https://news.google.com/rss/articles/CBMixAFBVV95cUxNZXdjRTBqRkh2ODFFbXYwaTVZRGZzUDZlVUtJV2JlaGh3aW9uQ3hmemMzbkdWUVlmQUdsbTZKV3RqRC12dHQxS01uaGJIYXdlQ0IxcDJlUldySnFPREZnVEpRRWZXazBIcDExLXAyUjEwZjFyZzhoSnhUbm5nT3lGVFJRdDdzOVN0ZlF3Uzl0aTl4UVpaSFBYdmRjOWFLOFIySHhCSTdOX3FycjVYSnl4ZXllRjBzWnB0ZUtQQmdSZ3pKVXh5?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-07-21/hackers-are-exploiting-recently-patched-wordpress-bugs-putting-millions-of*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*