Detect WordPress Vulnerable Machines (CVE-2026-63030 and CVE-2026-60137-Wp2shell Exploit)

Subash Ghimire@iamsubashg

•updated Jul 23, 2026•1•0•20

Threat actors are exploiting the recently Discovered WordPress Vulnerability. Vulnerability Management platform like defender not fully capable of identifying the vulnerable WordPress Core Application being installed on the organizations Servers. If you are using Defender XDR, here's the KQL to hunt for WordPress Installed Linux and Windows Servers.