cve-2026-93485

Here are 2 public repositories matching this topic...

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

wordpress exploit xss poc rce bug-bounty infosec nuclei webshell webappsec web-exploitation web-application-security security-research zeroday pre-auth zero-click nuclei-templates cve-2026-93485

Updated Oct 6, 2026
Python

686f6c61 / POC-WP-CORE-CVE-2026-93485

Star

Laboratorio pedagógico de CVE-2026-93485 (Comment2Shell): stored XSS no autenticado en WordPress core vía wpautop -> RCE, con demo del root cause auto-verificada, control 7.1.1 y la vía Post2Shell

docker wordpress education security proof-of-concept exploit docker-compose xss rce wordpress-security cve writeup security-research security-lab cve-analysis cve-2026-93485

Updated Sep 26, 2026
Python

Add this topic to your repo

To associate your repository with the cve-2026-93485 topic, visit your repo's landing page and select "manage topics."

Learn more