PHP2Shell attacks root Palo Alto firewalls; WordPress largely spared
A China-linked group chained PHP2Shell with Fragnesia to plant root webshells on at least 25 PAN-OS firewalls.
88
- Mentions · 7d2
- Mentions · 30d3
- All mentions4
- First seenSep 5, 2026
- Last mentioned18h ago
Timeline
4 articles · newest firstAttackers target fresh WordPress core update flaw hours after patch
The unauthenticated race condition can yield remote code execution only during a short core-update window; Wordfence has not confirmed compromises.
80
Ghostscript flaw lets hackers hijack servers via PDF uploads
Ghostscript heap overflow CVE-2026-39919 can enable remote code execution through crafted PDF uploads, with no exploitation seen yet.
68
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Attackers are actively exploiting critical file-upload flaw CVE-2026-32475 in Elementor Pro, hacking WordPress sites; Defiant has blocked over 190,000 exploit attempts since patching.
82
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- Heap Buffer Overflow in Ghostscript JPEG 2000 Output Path Enables RCE
- CVE-2026-324752%9.0Unauthenticated PHP File Upload (RCE) in Elementor Pro WordPress Plugin
Appears with
- WordPressproduct · 3
- Wordfenceorganization · 2
- Defiantvendor · 1
- Artifexorganization · 1
- ImageMagickproduct · 1
- Elementorvendor · 1
- Unit 42organization · 1
- WatchTowrorganization · 1
- Elementororganization · 1
- Automatticvendor · 1
- Ghostscriptproduct · 1
- Cato Networksorganization · 1
- Elementor Proproduct · 1
- Dreamorganization · 1
- PHPproduct · 1
- WordPressvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.