WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server TakeoverSecurity Affairs·Aug 7, 16:49 UTC · Aug 7, 2026Exploit / PoC157