
wp2shell-poc
wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
authenticationcommand-and-controlexploitation+5

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

Proof-of-concept exploit for CVE-2020-11651 achieving pre-authentication remote code execution on SaltStack master and minions via salt.cmd runner.

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)