21. Jul 2026
Security Vulnerabilities in WordPress
On Friday, a set of security vulnerabilities in WordPress known as wp2shell came to attention. These were exploited to attack several blogs. As a result, potential user data from some blog instances was compromised, and blogs were taken over. The specific data affected is currently still being investigated.
The incidents were detected this morning around 9 a.m., and countermeasures were initiated. The affected systems were taken offline, isolated, and cleaned up. The data protection officer has been informed, and we will notify affected users directly about further steps by July 24.
A list of potentially affected systems is available for blog administrators and IT coordinators.
