Can hackers exploit this without plugins?

Yes. This vulnerability is in WordPress Core, not a plugin. A default WordPress installation running affected versions could be vulnerable.

Are hackers already using this?

Yes. Public exploit code has been released, and security companies have reported early signs of real-world attacks targeting unpatched websites.

Will updating WordPress remove malware?

No. Updating WordPress fixes the vulnerability, but it won't remove malware or undo changes if your website was already compromised. That's why it's important to check your administrator accounts and scan your website after updating.

If I update now, am I safe?

Updating protects you from this vulnerability going forward. However, if your website was already compromised before you updated, you should still inspect it for unauthorized administrator accounts, malicious files, or other signs of intrusion.

Security Audits Archives - Phantom Freelance

BLOG

Catch up with what's been going on at Phantom Freelance

WordPress WP2Shell Vulnerability: How to Check if Your Website Has Been Compromised

July 20, 2026

WordPress security alert and update guide

A critical pre-authentication remote code execution (RCE) vulnerability has been discovered in WordPress Core (the software that powers your website). Security researchers have nicknamed the exploit chain WP2Shell. Unlike most WordPress security issues, this is not caused by a plugin or theme—it affects WordPress itself.

Why WordPress Maintenance & Security is important

August 31, 2018

Do I really need to be worried about WordPress Maintenance & Security? To best understand the importance of WordPress Maintenance and Security it’s easiest to use an analogy, who doesn’t love a good analogy? A lot of you have most likely owned at least one vehicle in your lives. For those of you that haven’t,…

LET'S START TALKING ABOUT YOUR PROJECT

WordPress Image Lightbox

Phantom Freelance

BLOG

Posts Tagged ‘Security Audits’

WordPress WP2Shell Vulnerability: How to Check if Your Website Has Been Compromised

Absolute pleasure working with Keryn