wp2shell Web Shell File Creation in WordPress Plugin Directory

Duo Tech@duotech

•updated Jul 23, 2026•2•0•7

Detects creation of PHP web shell files or plugin directories under WordPress wp-content/plugins using the wp2shell_<hex> naming convention, associated with the wp2shell WordPress Core RCE exploitation chain.