Security researchers have documented a critical vulnerability chain affecting WordPress installations, where threat actors combine multiple flaws to achieve unauthorized remote code execution. The wp2shell attack leverages publicly available exploits to target unpatched systems at scale, enabling attackers to install persistent web shells and inject malicious plugins. This coordinated exploitation campaign underscores the importance of timely security updates and vulnerability management in WordPress ecosystems.

Summary auto-generated by AI from the original publisher's content. Editorial standards.