<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>wordpress-rce - Sn1perSecurity</title>
	<atom:link href="https://sn1persecurity.com/wordpress/tag/wordpress-rce/feed/" rel="self" type="application/rss+xml" />
	<link>https://sn1persecurity.com/wordpress</link>
	<description>Get an attacker&#039;s view of your organization with our all-in-one offensive security platform</description>
	<lastBuildDate>Mon, 10 Aug 2026 21:15:56 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://sn1persecurity.com/wordpress/wp-content/uploads/2023/03/favoriteiconsniper.png</url>
	<title>wordpress-rce - Sn1perSecurity</title>
	<link>https://sn1persecurity.com/wordpress</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">197797428</site>	<item>
		<title>XSS2Shell (CVE-2026-64638): WordPress Pre-Auth XSS to RCE Detection with Nuclei</title>
		<link>https://sn1persecurity.com/wordpress/xss2shell-cve-2026-64638-wordpress-rce-detection-with-nuclei/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=xss2shell-cve-2026-64638-wordpress-rce-detection-with-nuclei</link>
		
		<dc:creator><![CDATA[xer0dayz]]></dc:creator>
		<pubDate>Mon, 10 Aug 2026 21:15:56 +0000</pubDate>
				<category><![CDATA[Attack Surface Management]]></category>
		<category><![CDATA[Bug Bounties]]></category>
		<category><![CDATA[CVE's]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Penetration Testing]]></category>
		<category><![CDATA[Threat Intelligence]]></category>
		<category><![CDATA[Vulnerability Scanning]]></category>
		<category><![CDATA[2026]]></category>
		<category><![CDATA[attack-surface-management]]></category>
		<category><![CDATA[cross-site-scripting]]></category>
		<category><![CDATA[cve-2026-64638]]></category>
		<category><![CDATA[nuclei-template]]></category>
		<category><![CDATA[reflected-xss]]></category>
		<category><![CDATA[sn1per]]></category>
		<category><![CDATA[sn1per pro]]></category>
		<category><![CDATA[wordpress-rce]]></category>
		<category><![CDATA[wordpress-security]]></category>
		<category><![CDATA[wordpress-vulnerability]]></category>
		<category><![CDATA[xss2shell]]></category>
		<guid isPermaLink="false">https://sn1persecurity.com/wordpress/xss2shell-cve-2026-64638-wordpress-rce-detection-with-nuclei/</guid>

					<description><![CDATA[<p>XSS2Shell (CVE-2026-64638) is a pre-authentication reflected XSS on the WordPress login screen that escalates to PHP code execution against a logged-in administrator. A plain-English advisory, a ready-to-run non-destructive Nuclei detection template, the full 24-branch patched-version table, and how to detect affected WordPress at scale with Sn1per.</p>
<p>The post <a href="https://sn1persecurity.com/wordpress/xss2shell-cve-2026-64638-wordpress-rce-detection-with-nuclei/">XSS2Shell (CVE-2026-64638): WordPress Pre-Auth XSS to RCE Detection with Nuclei</a> first appeared on <a href="https://sn1persecurity.com/wordpress">Sn1perSecurity</a>.</p>]]></description>
		
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">65735</post-id>	</item>
		<item>
		<title>wp2shell (CVE-2026-63030): Unauthenticated Pre-Auth RCE in WordPress Core &#8211; Advisory + Nuclei Detection</title>
		<link>https://sn1persecurity.com/wordpress/wp2shell-cve-2026-63030-wordpress-rce-detection-with-sn1per/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=wp2shell-cve-2026-63030-wordpress-rce-detection-with-sn1per</link>
		
		<dc:creator><![CDATA[xer0dayz]]></dc:creator>
		<pubDate>Sat, 18 Jul 2026 19:00:36 +0000</pubDate>
				<category><![CDATA[Attack Surface Management]]></category>
		<category><![CDATA[Bug Bounties]]></category>
		<category><![CDATA[CVE's]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Penetration Testing]]></category>
		<category><![CDATA[Threat Intelligence]]></category>
		<category><![CDATA[Vulnerability Scanning]]></category>
		<category><![CDATA[2026]]></category>
		<category><![CDATA[cve-2026-60137]]></category>
		<category><![CDATA[cve-2026-63030]]></category>
		<category><![CDATA[nuclei-template]]></category>
		<category><![CDATA[sn1per]]></category>
		<category><![CDATA[sn1per pro]]></category>
		<category><![CDATA[unauthenticated-rce]]></category>
		<category><![CDATA[wordpress-rce]]></category>
		<category><![CDATA[wordpress-security]]></category>
		<category><![CDATA[wordpress-vulnerability]]></category>
		<category><![CDATA[wp2shell]]></category>
		<guid isPermaLink="false">https://sn1persecurity.com/wordpress/wp2shell-cve-2026-63030-wordpress-rce-detection-with-sn1per/</guid>

					<description><![CDATA[<p>wp2shell (CVE-2026-63030) is an unauthenticated pre-auth RCE in WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1. A plain-English advisory, a ready-to-run Nuclei detection template, remediation, and how to detect affected WordPress at scale with Sn1per.</p>
<p>The post <a href="https://sn1persecurity.com/wordpress/wp2shell-cve-2026-63030-wordpress-rce-detection-with-sn1per/">wp2shell (CVE-2026-63030): Unauthenticated Pre-Auth RCE in WordPress Core – Advisory + Nuclei Detection</a> first appeared on <a href="https://sn1persecurity.com/wordpress">Sn1perSecurity</a>.</p>]]></description>
		
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">65281</post-id>	</item>
	</channel>
</rss>
