Wp2shell: First Critical Unauthenticated WordPress Core RCE in Nearly a Decade
wordfence.com