CVE-2026-48907

Infrastructure, Malware, Security

1.4 Million Sites Were on the List. 25,195 Had Evidence of Compromise.

Large WordPress and Breeze target lists narrowing to a smaller set of validated compromises and active PHP webshells

WP-SHELLSTORM's exposed server showed how target lists, validated compromises and active webshells are different measures of a mass-exploitation operation.

Rob Nidschelm
10 Jul 2026