REST API

1 posts

/wordpress-wp2shell-rce/wordpress-wp2shell-rce.png
WordPress Let One Request Read Your Database for 227 Days

July 18, 2026

A hole in WordPress handed your database to someone who never logged in. For 227 days it took one request. It needed no password and no plugin, just an address …