SecurityCISA Adds WordPress SQL Injection to KEV List
WordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
> Search
2 results for “cve-2026-60137”
2 results for “cve-2026-60137”
SecurityWordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
SecurityA pair of newly identified vulnerabilities dubbed WP2Shell are being actively exploited in the wild, triggering forced site updates.