Security Alert - Critical WordPress Update (wp2shell)

<div>CVE-2026-63030 + CVE-2026-60137 · Pre-auth WordPress Core RCE chain used as initial access to deploy Agent-TCP, a cross-platform Go RAT, across Windows &amp; Linux — combined with mass IoT compromise across 14 CPU architectures, fileless execution via MemfdCreate, and DLL injection on Windows.<br><br>Affected: WordPress 6.9.0–7.0.1. Fixed: 7.0.2 / 6.9.5. It is recommended that you update your sites immediately: <a href="https://wordpress.org/news/2026/07/wordpress-7-0-2-release/">https://wor... href="https://wordpress.org/news/2026/07/wordpress-7-0-2-release/">https://wor... href="https://blog.offensive-intel.com/cross-platform-rat-deployment-via-wp2sh...