Blog

AllVulnerabiltiy AdvisoryWordPressReactPHPNEXT.JS
React2Shell and the Emergency Patching Problem
React

React2Shell and the Emergency Patching Problem

The December 2025 React2Shell zero-day exposed a painful truth: most organizations still rely on emergency patching as their primary defense. Here is why behavioral WAFs handled it without breaking a sweat.

Critical WordPress RCE Vulnerability: wp2shell (CVE-2026-63030, CVE-2026-60137)
Vulnerabiltiy Advisory

Critical WordPress RCE Vulnerability: wp2shell (CVE-2026-63030, CVE-2026-60137)

A critical pre-authentication remote code execution vulnerability in WordPress Core allows anonymous attackers to fully compromise any stock WordPress installation. Over 500 million websites are potentially affected.