WordPress Security Alert: What the July 2026 wp2shell Vulnerability Means for Your Site
A chained WordPress bug let attackers take over sites with no login, and CISA confirmed it was already being exploited. Here's what happened and what to check right now.