๐ฉ๐ช
yitzhaq
2026-07-24 22:51:00
(7 hours ago)
wp2shell unauthenticated WordPress RCE: CVE-2026-63030 (REST /wp-json/batch/v1 route confusion) chai ...
show more
wp2shell unauthenticated WordPress RCE: CVE-2026-63030 (REST /wp-json/batch/v1 route confusion) chained with CVE-2026-60137 (WP_Query SQLi). 16 successful HTTP 207 exploit POST(s) to /wp-json/batch/v1 (& /?rest_route=/batch/v1) against our WordPress hosts, 2026-07-21T22:17:37Z..2026-07-22T13:11:51Z UTC. Apache access-log evidence (our hostname/domains redacted):
179.43.145.34 - - [22/Jul/2026:00:17:37 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 207 4969 "-" "wp2shell"
179.43.145.34 - - [22/Jul/2026:00:17:37 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 4969 "-" "wp2shell"
179.43.145.34 - - [22/Jul/2026:00:17:37 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 86786 "-" "wp2shell"
179.43.145.34 - - [22/Jul/2026:00:17:38 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 86968 "-" "wp2shell"
179.43.145.34 - - [22/Jul/2026:00:17:38 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 87024 "-" "wp2shell"
...
show less
Hacking
Web App Attack
SQL Injection
๐บ๐ธ
julianalee.com
2026-07-24 15:14:00
(15 hours ago)
22/Jul/26 21:25:37 #3681460 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerabi ...
show more
22/Jul/26 21:25:37 #3681460 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateinatherton.com
22/Jul/26 21:25:44 #7113449 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateinlosaltoshills.com
22/Jul/26 21:25:46 #3930497 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateinpacifica.com
23/Jul/26 11:32:05 #7369200 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - pacifica-real-estate-and-homes-for-sale.com
show less
Hacking
๐จ๐ฟ
ddw
2026-07-24 03:44:58
(1 day ago)
ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 10))
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-24 01:47:22
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
๐บ๐ธ
julianalee.com
2026-07-23 22:07:00
(1 day ago)
22/Jul/26 21:14:22 #5763171 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerabi ...
show more
22/Jul/26 21:14:22 #5763171 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-los-altos-ca.com
22/Jul/26 21:14:26 #1491962 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-pacifica-ca.com
22/Jul/26 21:14:31 #3656830 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-san-jose-ca.com
22/Jul/26 21:14:32 #4417047 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-sunnyvale-ca.com
show less
Hacking
๐ฉ๐ช
Hugopvigo
2026-07-23 20:53:57
(1 day ago)
"2026-07-23 20:53:56+00:00 179.43.145.34 IP con score alto (100) detectada en el log."
Brute-Force
SSH
๐บ๐ธ
julianalee.com
2026-07-23 19:22:00
(1 day ago)
22/Jul/26 21:25:24 #5740068 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerabi ...
show more
22/Jul/26 21:25:24 #5740068 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateforsalehillsborough.com
22/Jul/26 21:25:25 #5599549 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateforsaleatherton.com
22/Jul/26 21:25:28 #3749064 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateforsalepacifica.com
show less
Hacking
๐ช๐ธ
alferez
2026-07-23 19:21:19
(1 day ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
etu brutus
2026-07-23 17:09:23
(1 day ago)
179.43.145.34 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
๐ญ๐ณ
unph
2026-07-23 16:09:39
(1 day ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
๐บ๐ธ
omc
2026-07-23 16:01:50
(1 day ago)
Banned IP [QC]. POST /wp-json/batch/v1 [Q4].
Bad Web Bot
๐ฒ๐พ
Rizzy
2026-07-23 15:59:48
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
mediarama.com
2026-07-23 15:50:24
(1 day ago)
Banned by Fail2Ban
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-07-23 15:20:28
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐บ๐ธ
julianalee.com
2026-07-23 14:57:00
(1 day ago)
22/Jul/26 21:14:16 #4749864 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerabi ...
show more
22/Jul/26 21:14:16 #4749864 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-for-sale-in-hillsborough.com
22/Jul/26 21:14:17 #2117899 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-for-sale-in-atherton.com
22/Jul/26 21:14:18 #7202014 CRITICAL 1646 179.43.145.34 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - real-estate-for-sale-in-pacifica.com
show less
Hacking