The WordPress ecosystem is in the midst of its worst security crisis in almost a decade. wp2shell, a newly discovered exploit chain, has hit the web security worst case scenario: unauthenticated Remote Code Execution (RCE) targeting WordPress Core out of the box. Unlike most WordPress threats that target abandoned plugins or unpatched third party themes, … Continue reading The wp2shell Crisis: Why This WordPress Core RCE Changes the Timeline for Enterprise Defense