{"exploits":[{"source":"pocgithub","id":"Icex0/wp2shell-poc","title":"Icex0/wp2shell-poc","date":"2026-07-17","url":"https://github.com/Icex0/wp2shell-poc"},{"source":"pocgithub","id":"ZephrFish/wp2shell-scanner","title":"ZephrFish/wp2shell-scanner","date":"2026-07-17","url":"https://github.com/ZephrFish/wp2shell-scanner"},{"source":"pocgithub","id":"attackercan/wp2shell-poc2","title":"attackercan/wp2shell-poc2","date":"2026-07-17","url":"https://github.com/attackercan/wp2shell-poc2"},{"source":"metasploit","id":"exploit/multi/http/wp_batch_desync_rce","title":"WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE","type":"exploit","platform":"Linux,PHP,Unix","date":"2026-07-17","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/wp_batch_desync_rce"},{"source":"pocgithub","id":"0xWhoknows/wp2shell","title":"0xWhoknows/wp2shell","date":"2026-07-18","url":"https://github.com/0xWhoknows/wp2shell"},{"source":"pocgithub","id":"0xsha/wp2shell","title":"0xsha/wp2shell","date":"2026-07-18","url":"https://github.com/0xsha/wp2shell"},{"source":"pocgithub","id":"47Cid/wp2shell-lab","title":"47Cid/wp2shell-lab","date":"2026-07-18","url":"https://github.com/47Cid/wp2shell-lab"},{"source":"pocgithub","id":"4minx/CVE-2026-63030","title":"4minx/CVE-2026-63030","date":"2026-07-18","url":"https://github.com/4minx/CVE-2026-63030"},{"source":"pocgithub","id":"ChiefYoru/CVE-2026-63030_PoC","title":"ChiefYoru/CVE-2026-63030_PoC","date":"2026-07-18","url":"https://github.com/ChiefYoru/CVE-2026-63030_PoC"},{"source":"pocgithub","id":"CybersecSpirit/CVE-2026-63030","title":"CybersecSpirit/CVE-2026-63030","date":"2026-07-18","url":"https://github.com/CybersecSpirit/CVE-2026-63030"},{"source":"pocgithub","id":"J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t","title":"J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t","date":"2026-07-18","url":"https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t"},{"source":"pocgithub","id":"NULL200OK/WP2Shell","title":"NULL200OK/WP2Shell","date":"2026-07-18","url":"https://github.com/NULL200OK/WP2Shell"},{"source":"pocgithub","id":"Senanfurkan/wordpress-cve-2026-63030","title":"Senanfurkan/wordpress-cve-2026-63030","date":"2026-07-18","url":"https://github.com/Senanfurkan/wordpress-cve-2026-63030"},{"source":"pocgithub","id":"ashrafzaryouh/CVE-2026-63030","title":"ashrafzaryouh/CVE-2026-63030","date":"2026-07-18","url":"https://github.com/ashrafzaryouh/CVE-2026-63030"},{"source":"pocgithub","id":"dinosn/wp2shell-lab","title":"dinosn/wp2shell-lab","date":"2026-07-18","url":"https://github.com/dinosn/wp2shell-lab"},{"source":"pocgithub","id":"ekomsSavior/wp2shell","title":"ekomsSavior/wp2shell","date":"2026-07-18","url":"https://github.com/ekomsSavior/wp2shell"},{"source":"pocgithub","id":"fullhunt/wp2shell-scan","title":"fullhunt/wp2shell-scan","date":"2026-07-18","url":"https://github.com/fullhunt/wp2shell-scan"},{"source":"pocgithub","id":"gbrsh/CVE-2026-63030","title":"gbrsh/CVE-2026-63030","date":"2026-07-18","url":"https://github.com/gbrsh/CVE-2026-63030"},{"source":"pocgithub","id":"kulichr/wp2shell","title":"kulichr/wp2shell","date":"2026-07-18","url":"https://github.com/kulichr/wp2shell"},{"source":"pocgithub","id":"mrx-arafat/CVE-2026-63030-POC","title":"mrx-arafat/CVE-2026-63030-POC","date":"2026-07-18","url":"https://github.com/mrx-arafat/CVE-2026-63030-POC"},{"source":"pocgithub","id":"mverschu/CVE-2026-63030","title":"mverschu/CVE-2026-63030","date":"2026-07-18","url":"https://github.com/mverschu/CVE-2026-63030"},{"source":"pocgithub","id":"own2pwn-fr/wp2shell-detect","title":"own2pwn-fr/wp2shell-detect","date":"2026-07-18","url":"https://github.com/own2pwn-fr/wp2shell-detect"},{"source":"pocgithub","id":"securelayer7/WordPresShell","title":"securelayer7/WordPresShell","date":"2026-07-18","url":"https://github.com/securelayer7/WordPresShell"},{"source":"pocgithub","id":"tcyph3r/wp2shell-cve-2026-63030-root-cause","title":"tcyph3r/wp2shell-cve-2026-63030-root-cause","date":"2026-07-18","url":"https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause"},{"source":"pocgithub","id":"zi3lak/wp2shell_scanner","title":"zi3lak/wp2shell_scanner","date":"2026-07-18","url":"https://github.com/zi3lak/wp2shell_scanner"},{"source":"pocgithub","id":"0xh7ml/CVE-2026-63030","title":"0xh7ml/CVE-2026-63030","date":"2026-07-19","url":"https://github.com/0xh7ml/CVE-2026-63030"},{"source":"pocgithub","id":"4B3R4M4-607D/CVE-2026-63030-POC","title":"4B3R4M4-607D/CVE-2026-63030-POC","date":"2026-07-19","url":"https://github.com/4B3R4M4-607D/CVE-2026-63030-POC"},{"source":"pocgithub","id":"Crypto-Cat/wp2shell","title":"Crypto-Cat/wp2shell","date":"2026-07-19","url":"https://github.com/Crypto-Cat/wp2shell"},{"source":"pocgithub","id":"InstaWP/wp2shell-scan","title":"InstaWP/wp2shell-scan","date":"2026-07-19","url":"https://github.com/InstaWP/wp2shell-scan"},{"source":"pocgithub","id":"Lukols-Dev/wp-cve-2026-63030-check","title":"Lukols-Dev/wp-cve-2026-63030-check","date":"2026-07-19","url":"https://github.com/Lukols-Dev/wp-cve-2026-63030-check"},{"source":"pocgithub","id":"TomorrowX6/CVE-2026-63030-poc","title":"TomorrowX6/CVE-2026-63030-poc","date":"2026-07-19","url":"https://github.com/TomorrowX6/CVE-2026-63030-poc"},{"source":"pocgithub","id":"ZenithGenius/wordpress-batch-rce-lab","title":"ZenithGenius/wordpress-batch-rce-lab","date":"2026-07-19","url":"https://github.com/ZenithGenius/wordpress-batch-rce-lab"},{"source":"pocgithub","id":"ananay/wp2shell-lab","title":"ananay/wp2shell-lab","date":"2026-07-19","url":"https://github.com/ananay/wp2shell-lab"},{"source":"pocgithub","id":"bahartanir/wp2shell-scanner","title":"bahartanir/wp2shell-scanner","date":"2026-07-19","url":"https://github.com/bahartanir/wp2shell-scanner"},{"source":"pocgithub","id":"c0gnit00/Wp2Shell","title":"c0gnit00/Wp2Shell","date":"2026-07-19","url":"https://github.com/c0gnit00/Wp2Shell"},{"source":"pocgithub","id":"eyesecurity/wp2shell-compromise-scanner-plugin","title":"eyesecurity/wp2shell-compromise-scanner-plugin","date":"2026-07-19","url":"https://github.com/eyesecurity/wp2shell-compromise-scanner-plugin"},{"source":"pocgithub","id":"hidden-investigations/wp2shell-scanner","title":"hidden-investigations/wp2shell-scanner","date":"2026-07-19","url":"https://github.com/hidden-investigations/wp2shell-scanner"},{"source":"pocgithub","id":"ikow/wp2shell","title":"ikow/wp2shell","date":"2026-07-19","url":"https://github.com/ikow/wp2shell"},{"source":"pocgithub","id":"skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030","title":"skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030","date":"2026-07-19","url":"https://github.com/skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030"},{"source":"pocgithub","id":"vulnquest58/PressVector","title":"vulnquest58/PressVector","date":"2026-07-19","url":"https://github.com/vulnquest58/PressVector"},{"source":"pocgithub","id":"0xjessie21/wp2shell-checker","title":"0xjessie21/wp2shell-checker","date":"2026-07-20","url":"https://github.com/0xjessie21/wp2shell-checker"},{"source":"pocgithub","id":"Ch4120N/CVE-2026-63030","title":"Ch4120N/CVE-2026-63030","date":"2026-07-20","url":"https://github.com/Ch4120N/CVE-2026-63030"},{"source":"pocgithub","id":"GhostInExile/CVE-2026-63030-Wp2Shell","title":"GhostInExile/CVE-2026-63030-Wp2Shell","date":"2026-07-20","url":"https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell"},{"source":"pocgithub","id":"Iqbalx7/wp2shell","title":"Iqbalx7/wp2shell","date":"2026-07-20","url":"https://github.com/Iqbalx7/wp2shell"},{"source":"pocgithub","id":"administrator-01001/CVE-2026-63030","title":"administrator-01001/CVE-2026-63030","date":"2026-07-20","url":"https://github.com/administrator-01001/CVE-2026-63030"},{"source":"pocgithub","id":"joaovicdev/EXPLOIT-CVE-2026-63030","title":"joaovicdev/EXPLOIT-CVE-2026-63030","date":"2026-07-20","url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-63030"},{"source":"pocgithub","id":"lucifer0xf/wp2shell-Wordpress-TOWN","title":"lucifer0xf/wp2shell-Wordpress-TOWN","date":"2026-07-20","url":"https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN"},{"source":"pocgithub","id":"Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","title":"Bhanunamikaze/WP2Shell-CVE-2026-63030-POC","date":"2026-07-21","url":"https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC"},{"source":"pocgithub","id":"Adrees-Basheer/wp2shell-vulnerability-scanner","title":"Adrees-Basheer/wp2shell-vulnerability-scanner","date":"2026-07-22","url":"https://github.com/Adrees-Basheer/wp2shell-vulnerability-scanner"},{"source":"pocgithub","id":"gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","title":"gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc","date":"2026-07-22","url":"https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc"},{"source":"pocgithub","id":"mcipekci/wp2shell","title":"mcipekci/wp2shell","date":"2026-07-22","url":"https://github.com/mcipekci/wp2shell"},{"source":"pocgithub","id":"raphy76/wp2shell-poc-fulljs","title":"raphy76/wp2shell-poc-fulljs","date":"2026-07-22","url":"https://github.com/raphy76/wp2shell-poc-fulljs"},{"source":"pocgithub","id":"razureink/cve-2026-63030_60137-wordpress_rce_reproduction","title":"razureink/cve-2026-63030_60137-wordpress_rce_reproduction","date":"2026-07-23","url":"https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction"},{"source":"pocgithub","id":"Giangdurian/CVE-2026-63030-CVE-2026-60137","title":"Giangdurian/CVE-2026-63030-CVE-2026-60137","date":"2026-07-24","url":"https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137"},{"source":"pocgithub","id":"shinthink/CVE-2026-63030","title":"shinthink/CVE-2026-63030","date":"2026-07-24","url":"https://github.com/shinthink/CVE-2026-63030"},{"source":"pocgithub","id":"imXur/WordPress-CVE-2026-63030-Analysis","title":"imXur/WordPress-CVE-2026-63030-Analysis","date":"2026-07-25","url":"https://github.com/imXur/WordPress-CVE-2026-63030-Analysis"},{"source":"pocgithub","id":"BytesPulse-OE/wp2shell-Hestia-Scanner","title":"BytesPulse-OE/wp2shell-Hestia-Scanner","date":"2026-07-27","url":"https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner"},{"source":"pocgithub","id":"yuag/wp2shell","title":"yuag/wp2shell","date":"2026-07-27","url":"https://github.com/yuag/wp2shell"},{"source":"pocgithub","id":"Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell","title":"Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell","date":"2026-07-30","url":"https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell"},{"source":"pocgithub","id":"johnlodan/wp2shell-rce","title":"johnlodan/wp2shell-rce","date":"2026-08-02","url":"https://github.com/johnlodan/wp2shell-rce"},{"source":"pocgithub","id":"Procjevt/CVE-2026-63030","title":"Procjevt/CVE-2026-63030","date":"2026-08-03","url":"https://github.com/Procjevt/CVE-2026-63030"},{"source":"pocgithub","id":"x-znn/CVE-2026-63030","title":"x-znn/CVE-2026-63030","date":"2026-08-04","url":"https://github.com/x-znn/CVE-2026-63030"},{"source":"pocgithub","id":"AnggaTechI/CVE-2026-63030","title":"AnggaTechI/CVE-2026-63030","date":"2026-08-05","url":"https://github.com/AnggaTechI/CVE-2026-63030"},{"source":"pocgithub","id":"z3rodayhacks/CVE-2026-63030-CVE-2026-60137","title":"z3rodayhacks/CVE-2026-63030-CVE-2026-60137","date":"2026-08-07","url":"https://github.com/z3rodayhacks/CVE-2026-63030-CVE-2026-60137"},{"source":"pocgithub","id":"g0d150ne/WP2Shell","title":"g0d150ne/WP2Shell","date":"2026-08-09","url":"https://github.com/g0d150ne/WP2Shell"},{"source":"pocgithub","id":"0xIIDe231/wp2shell2026","title":"0xIIDe231/wp2shell2026","date":"2026-08-16","url":"https://github.com/0xIIDe231/wp2shell2026"},{"source":"pocgithub","id":"mhassani97/cve-2026-63030-lab","title":"mhassani97/cve-2026-63030-lab","date":"2026-08-20","url":"https://github.com/mhassani97/cve-2026-63030-lab"},{"source":"pocgithub","id":"DeadExpl0it/wp2shell-poc","title":"DeadExpl0it/wp2shell-poc","date":"2026-08-21","url":"https://github.com/DeadExpl0it/wp2shell-poc"},{"source":"pocgithub","id":"Sec-Dan/WP2Shell-Scanner","title":"Sec-Dan/WP2Shell-Scanner","date":"2026-08-30","url":"https://github.com/Sec-Dan/WP2Shell-Scanner"},{"source":"pocgithub","id":"fl0ydsec/CVE-2026-63030","title":"fl0ydsec/CVE-2026-63030","date":"2026-09-24","url":"https://github.com/fl0ydsec/CVE-2026-63030"},{"source":"pocgithub","id":"langz337/CVE-2026-63030","title":"langz337/CVE-2026-63030","date":"2026-09-26","url":"https://github.com/langz337/CVE-2026-63030"},{"source":"pocgithub","id":"0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL","title":"0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL","date":"2026-10-12","url":"https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL"},{"source":"pocgithub","id":"Githu836/PoC-for-CVE-2026-63030","title":"Githu836/PoC-for-CVE-2026-63030","date":"2026-10-21","url":"https://github.com/Githu836/PoC-for-CVE-2026-63030"},{"source":"pocgithub","id":"Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030","title":"Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030","date":"2026-10-21","url":"https://github.com/Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030"},{"source":"pocgithub","id":"dexit/CVE-2026-63030","title":"dexit/CVE-2026-63030","date":"2026-10-21","url":"https://github.com/dexit/CVE-2026-63030"},{"source":"pocgithub","id":"l-i-uqing/CVE-2026-63030-wp2shell-repro","title":"l-i-uqing/CVE-2026-63030-wp2shell-repro","date":"2026-11-02","url":"https://github.com/l-i-uqing/CVE-2026-63030-wp2shell-repro"},{"source":"pocgithub","id":"noxcrypt-x/CVE-2026-63030","title":"noxcrypt-x/CVE-2026-63030","date":"2026-11-08","url":"https://github.com/noxcrypt-x/CVE-2026-63030"},{"source":"metasploit","id":"auxiliary/scanner/http/wordpress_wp2shell_sqli","title":"WordPress Core wp2shell Unauthenticated SQL Injection via REST Batch Route Confusion","type":"auxiliary","date":"2026-07-17","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_wp2shell_sqli"},{"source":"nuclei","id":"CVE-2026-63030","title":"WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml"}]}