WordPress Core 6.9-7.0.1 – Pre-Auth Blind SQL Injection (Batch-Route Confusion)
Introduction Discovered as a major security flaw in the core architecture of WordPress, the vulnerability chain colloquially known as wp2shell represents one of the most severe threat vectors impacting the Content Management System ecosystem. Because WordPress powers over 40% of all websites globally, the blast radius of this default-configuration flaw is exceptionally wide. This exploit chain targets two integral components of WordPress
