cve-2026-64638-poc-xss2shell-
cve-2026-64638-poc-xss2shell- is XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template - Boreas37/CVE-2026-64638-PoC-XSS2Shell-. It is ranked #1365 on the Dev Radar, in Security, first seen 8 days ago and shared in 1 post (108k views).
GitHub - Boreas37/CVE-2026-64638-PoC-XSS2Shell-: XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template · GitHub Skip to content Navigation Menu Sign in Appearance settings Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Repository navigation CVE-2026-64638-PoC-XSS2Shell- Public Notifications You must be signed in to change…
What people said about cve-2026-64638-poc-xss2shell- on X
CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution PoC: https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-
— @DarkWebInformer, 8 days ago · 1.6k likes · see the post
Alternatives to cve-2026-64638-poc-xss2shell-
- rea — Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android…
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- GitHub Docs — You can customize your profile so that other people can get a better sense of who you are and the work you do.
- security-audit-skill — I highly recommend cloudflare's security audit skill
cve-2026-64638-poc-xss2shell- in numbers
- Rank on the Dev Radar: #1365 of 8798
- Shared in 1 post by 1 account: @DarkWebInformer
- 108k views on those posts
- First seen 8 days ago, last shared 8 days ago
- Pricing seen by AGK Intelligence: open source
- Market: Security
FAQ
What is cve-2026-64638-poc-xss2shell-?
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template - Boreas37/CVE-2026-64638-PoC-XSS2Shell- It was first shared on X 8 days ago and is ranked #1365 on the Dev Radar.
Is cve-2026-64638-poc-xss2shell- free?
It is open source.
Who shared cve-2026-64638-poc-xss2shell-?
1 account on X, including @DarkWebInformer, in 1 post totalling 108k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:27 UTC. Full method.