Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost
ClawBench
ClawBench
Busbar
Busbar

0xsha/wp2shell

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core

Visit GitHub
Python
116
38
1 contributors
Custom license
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

ClawBench

a benchmark for personal agents

Busbar

Control what AI can do before it acts

Momentum

How fast 0xsha/wp2shell is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 28 – Oct 22, 2026

Stars +16 in 56 days

012
2

Forks +8 in 56 days

0123
3

Merged PRs 0 in 56 days

01

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Aug 28Sep 4Sep 11Sep 18Sep 25Oct 2Oct 9Oct 16
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Fri, Aug 28, 2026+2+00
Sat, Aug 29, 2026+0+00
Sun, Aug 30, 2026+0+00
Mon, Aug 31, 2026+0+00
Tue, Sep 1, 2026+1+00
Wed, Sep 2, 2026+1+10
Thu, Sep 3, 2026+0+10
Fri, Sep 4, 2026+0+00
Sat, Sep 5, 2026+0+00
Sun, Sep 6, 2026+0+00
Mon, Sep 7, 2026+1+00
Tue, Sep 8, 2026+0+00
Wed, Sep 9, 2026+1+00
Thu, Sep 10, 2026+0+10
Fri, Sep 11, 2026+0+00
Sat, Sep 12, 2026+0+00
Sun, Sep 13, 2026+0+00
Mon, Sep 14, 2026+0+00
Tue, Sep 15, 2026+2+00
Wed, Sep 16, 2026+0+00
Thu, Sep 17, 2026+0+00
Fri, Sep 18, 2026+0+00
Sat, Sep 19, 2026+1+00
Sun, Sep 20, 2026+0+00
Mon, Sep 21, 2026+0+00
Tue, Sep 22, 2026+0+10
Wed, Sep 23, 2026+0+00
Thu, Sep 24, 2026+0+00
Fri, Sep 25, 2026+0+00
Sat, Sep 26, 2026+0+00
Sun, Sep 27, 2026+0+00
Mon, Sep 28, 2026+0+00
Tue, Sep 29, 2026+0+00
Wed, Sep 30, 2026+1+00
Thu, Oct 1, 2026+0+00
Fri, Oct 2, 2026+0+00
Sat, Oct 3, 2026+0+00
Sun, Oct 4, 2026+1+00
Mon, Oct 5, 2026+2+30
Tue, Oct 6, 2026+1+00
Wed, Oct 7, 2026+0+00
Thu, Oct 8, 2026+0+00
Fri, Oct 9, 2026+0+00
Sat, Oct 10, 2026+0+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+0+00
Tue, Oct 13, 2026+0+00
Wed, Oct 14, 2026+0+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+0+00
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+10
Mon, Oct 19, 2026+0+00
Tue, Oct 20, 2026+0+00
Wed, Oct 21, 2026+0+00
Thu, Oct 22, 2026+2+00
Total+16+80
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Social mentions

Recent discussions about this repository across the web
  1. Jul 181 post

    • SQLi still works

      Read full on X, posted by @0xsha

      @0xsha · x.com

You might also like

Repositories close to 0xsha/wp2shell
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

Busbar

Control what AI can do before it acts

ClawBench

a benchmark for personal agents

Icex0/wp2shell-poc

Python

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

802196

gichirimaku/wp2shell-PoC

Python

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.

56253

sergiointel/wp2shell-poc

Python

Stock vulnerable wordpress RCE poc for wp2shell.

11427

Chocapikk/CVE-2023-6553

Python

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

8724

AiGptCode/AiGPT-WordPress-Exploitation-Framework

Python

AiGPT started from the concept of CVE‑2024‑27956 , the WP Automatic CSV injection — but has been completely rebuilt into a multi‑vector, unauthenticated WordPress exploitation engine. It now chains 13 real‑world CVEs to create an administrator account or drop a web shell directly, then automatically injects a reverse shell into the active theme

13334

InMyMine7/Mephisto

Python

A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabilities (CVEs) to help security professionals identify and patch weaknesses.

10322

opaxial/CVE-2026-9830

Python

CVE-2026-9830 Proof of Concept

4766

Chocapikk/CVE-2024-25600

Python

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

18339

wpscanteam/wpscan

Ruby

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

9.8k1.3k