Atomicorp Blocked wp2shell Exploit Before It Had a Name
CWE-first protection wins again. While the industry raced to publish emergency wp2shell detections, Atomicorp’s existing generic SQL injection and RCE protections were already positioned to stop the underlying attack behavior. wp2shell: The attack was new. The weakness was not. The wp2shell chain combines CVE-2026-63030, a WordPress REST batch-route interpretation conflict, with CVE-2026-60137, an SQL injection […]
