Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...
Tech Times

Hidden Web Text Hijacked Kiro and Ran Attacker Code: AWS Confirms No CVE Assigned

AWS Kiro prompt injection flaw let hidden web page text rewrite the IDE’s MCP configuration file and silently execute ...
The Next Web

Hackers are mass-exploiting two WordPress flaws, and AI found the way in

Two patched WordPress vulnerabilities, chained as wp2shell, are under mass attack. AI helped find the flaw and weaponise it. Millions of sites may be exposed.