@caseyjohnellis Until a Supply Chain Attack comes and spoils the party 😅
English
Ryan Dewhurst
3.7K posts
Ryan Dewhurst
@ethicalhack3r
• Vulnerability & Threat Intelligence at https://t.co/hpcaDY39hO • Founder of @_WPScan_ (acquired by Automattic) • Founder of DVWA • Ethical Hacking Graduate
Katılım Haziran 2009
819 Takip Edilen21.2K Takipçiler
@WifiRumHam @ethicalhack3r There's no poc. It just reveals the version; it's not that significant of a vulnerability.
English
Hoping WordPress' official version install stats just haven't updated yet.
English
@TheHackersNews Takes a little more than a single request. But yea, this is bad.
Luckily WordPress has had auto-updates enabled by default for a while. But there will still be many with auto-updates disabled.
English
🛑 URGENT - A single anonymous HTTP request can run code on an unpatched #WordPress 6.9 or 7.0 site, even on a default install with zero plugins.
The new wp2shell flaw sits in core and still has no CVE for scanners to match.
Affected releases and mitigations 🠖 thehackernews.com/2026/07/new-wp…
English
PoC out in 3 2 ..
Patrik Grobshäuser@ITSecurityguard
🚨Searchlight Cyber's research team has found a pre-authentication RCE in WordPress Core. affected versions: 6.9.0–6.9.4, 7.0.0–7.0.1 No preconditions, exploitable by an anonymous user on a stock install with no plugins. CVE-2026-63030/CVE-2026-60137 wp2shell.com
English
Curious to see who will be the first "Mythos" level AI-Powered Code Scanning tool to reverse-engineer the Remote Code Execution and construct a valid POC🍿
WordPress@WordPress
WordPress 7.0.2 is now available. This security release addresses 1 critical and 1 high severity issue, including a REST API vulnerability that could lead to remote code execution. Update your sites now. wp.me/pZhYe-5vp
English
WordPress has auto-updates enabled for security releases since a long time.
So hopefully this lowers blast radius significantly.
But there'll still be a lot out there with auto-updates disabled.
Ryan Dewhurst@ethicalhack3r
Reproducing wp2shell is trivial with AI. Buckle up!
English
Ryan Dewhurst retweetledi
Ryan Dewhurst retweetledi
WordPress 7.0.2 is now available. This security release addresses 1 critical and 1 high severity issue, including a REST API vulnerability that could lead to remote code execution. Update your sites now. wp.me/pZhYe-5vp
English
Ryan Dewhurst retweetledi
CVE-2026-46442 is hitting KEVIntel’s Flowise sensor.
First seen July 13, with attempts increasing: 20 from 7 attacker IPs.
The odd part? It’s an authenticated RCE, but attackers are running the exploit unauthenticated.
Now in our KEV Feed:
kevintel.com/CVE-2026-46442
English
Ryan Dewhurst retweetledi
Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663.
Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.
English
The mystery is solved, maybe?
reddit.com/r/selfhosted/c…
Ryan Dewhurst@ethicalhack3r
Anyone want to help this guy escape from Belarus? 😬 Captured by KEVIntel sensors.
English
The mystery is solved, maybe?
reddit.com/r/selfhosted/c…
English
Anyone want to help this guy escape from Belarus? 😬
Captured by KEVIntel sensors.
English
Ryan Dewhurst retweetledi
Ryan Dewhurst retweetledi
@ex_raritas They included an email address.
YOLO'ed and sent an email.
Let's see if they respond. Interested in true motivation.
English
A really useful way to see whether an IP is targeting a single vulnerability or systematically probing a cluster of related CVEs.
KEVIntel@kev_intel
New in KEVIntel: Observed Attackers and Attacker IP Profiles. See which IPs are most active, which CVEs each IP is targeting, and the activity behind every profile. Export attacker IPs as CSV for blocklist and enrichment workflows. Product demo 👇
English