A critical WordPress Core exploit chain called WP2Shell, disclosed in July 2026, lets unauthenticated attackers run code on ...