Critical WordPress Security Vulnerability – Millions of WordPress Websites Are Under Active Attack – What You Should Do Now
A serious security vulnerability in WordPress has been publicly known since July 17, 2026. It is called “wp2shell” and is now being actively exploited in attacks. It does not affect a single plugin, but rather the core of WordPress itself—meaning virtually every standard installation.
