New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
2026-07-19T13:24:09Z•ac1f82079a5720f3f3c2f3f319a9c99f2645c1216802086224830bd9b3b89378
ACR-stealerCISA-KEVDigiCertNadMeshOtterCookieRATSVGSharePointZoomblockchain-C2botnetcloud-credentialscode-signinghollowbytekubernetesn8nnpmopensslsteganographysupply-chainsupply-chain-risktoken-exchangevitewordpresswp2shell
What happened
Multiple high-impact vulnerabilities, supply‑chain attacks, and active malware campaigns were reported across July 16–18, 2026. Notable items: a new WordPress core flaw dubbed “wp2shell” allows unauthenticated code execution (CVE IDs assigned; PoC public); an OpenSSL "HollowByte" denial‑of‑service pattern can consume large amounts of memory from 11‑byte TLS requests; seven malicious Vite npm packages (ViteVenom/ChainVeil) use a multi‑tier blockchain C2 to deliver a RAT; NadMesh botnet is scanning exposed AI services and harvesting cloud keys/Kubernetes tokens; a GoldenEyeDog subgroup (Cylindr
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- ac1f82079a5720f3f3c2f3f319a9c99f2645c1216802086224830bd9b3b89378
- Enrichment time
- 2026-07-19T13:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.