Urgent: check your WordPress version now (wp2shell – CVE-2026-60137 & CVE-2026-63030)
Two critical WordPress core vulnerabilities allow complete site takeover with no login required, and public exploits are already being used. Check your WordPress version and update immediately.