WP2Shell WordPress RCE: ModSecurity Protection
Malware.Expert – ModSecurity Rules now protect WordPress websites against active WP2Shell attacks. The protection blocks malicious author_exclude SQL injection requests used in the unauthenticated WordPress Remote Code Execution exploit chain. The virtual patch was released on July 18, 2026, in Malware Expert ModSecurity Rules version 1.2026.12. What is WP2Shell? WP2Shell is a critical vulnerability chain … Read more