wp2shell is already being exploited

kao

On 17-Jul-2026 an obscure security outfit Searchlight Cyber published their discovery: wp2shell - remote code execution in recent WordPress versions. Of course it was on Friday, the best time to publish information about an extremely dangerous bug! 😡

Since my blog runs on WordPress, I decided to analyze my webserver logs and see what's happening in the wild.

Read More →

Restarting the blog

kao

It's been quiet here for more than a year. That's OK, I've been busy with my real life and other projects.

Well, that's a lame excuse! 🙂 In this post I'll try to explain what happened and how I (hopefully) solved the issue.
Read More →