[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":60,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":67,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":73,"vulnerability-27497":80},[4,15,23,32,41,48,53],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"wp2shell (Sniper)","wp2shell-sniper","Validate wp2shell: one-click detection & exploitation confirms exposed or patched WP targets","https://pentest-tools.com/pricing",false,[11],"exploit-helpers/sniper","Get it with Pentest Suite","secondary","wp2shell",{"title":16,"slug":17,"text":18,"link":19,"external":9,"targets":20,"cta":22,"variant":13,"campaign_id":14},"wp2shell (Vuln DB homepage)","wp2shell-vuln-db","Emergency CVE response: detection & exploitation now available for *wp2shell*, the critical WP RCE chain","https://pentest-tools.com/vulnerabilities-exploits/wordpress-core-69-701-pre-auth-blind-sql-injection-batch-route-confusion_29451",[21],"/vulnerabilities-exploits/","See CVE details",{"title":24,"slug":25,"text":26,"link":27,"external":28,"targets":29,"cta":22,"variant":31,"campaign_id":14},"wp2shell (pricing)","wp2shell-p","Validate *wp2shell* exposure & mitigation! Detect with any plan. Exploit with Pentest Suite.","https://pentest-tools.com/vulnerabilities-exploits/wp2shell-wordpress-core-690-694-and-700-701-pre-auth-batch-route-confusion-leading-to-sql-injection_29452",true,[30],"/pricing","primary",{"title":14,"slug":14,"text":33,"link":8,"external":9,"targets":34,"cta":40,"variant":13,"campaign_id":14},"Validate wp2shell: one-click detection & exploitation confirms exposed or patched WP targets.",[35,36,37,38,39],"/","/network-vulnerability-scanning/network-security-scanner-online","/cms-vulnerability-scanning/wordpress-scanner-online-wpscan","/website-vulnerability-scanning/website-scanner","/product","Confirm the risk",{"title":42,"slug":43,"text":44,"link":8,"external":9,"targets":45,"cta":47,"variant":13,"campaign_id":14},"wp2shell (CVE page - exploitation)","wp2shell-cve-page-exploit","Validate wp2shell exposure & mitigation! Detect with any plan. Exploit with Pentest Suite.",[46],"/vulnerabilities-exploits/wp2shell-wordpress-core-690-694-and-700-701-pre-auth-batch-route-confusion-leading-to-sql-injection_29452","Explore plans",{"title":49,"slug":50,"text":44,"link":8,"external":9,"targets":51,"cta":47,"variant":13,"campaign_id":14},"wp2shell (CVE page - detection)","wp2shell-cve-page",[52],"/vulnerabilities-exploits/wordpress-core-69-701-pre-auth-blind-sql-injection-batch-route-confusion_29451",{"title":54,"slug":55,"text":56,"link":57,"external":28,"targets":58,"cta":59,"variant":31,"campaign_id":55},"Office Hours #8 - AI Survey","office-hours-8","Free live Office Hours, Wed Jul 29: The triage tax - why AI finds more and proves less","https://zoom.us/webinar/register/5117815316917/WN_kMwWqNEwQJa8NvfsFw89vw",[35],"Save your spot",["Island",61],{"key":62,"params":63,"result":65},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":64},"{}",{"head":66},{},["Island",68],{"key":69,"params":70,"result":71},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":64},{"head":72},{},["Island",74],{"key":75,"params":76,"result":78},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":77},"{\"text-color\":\"gray\"}",{"head":79},{},{"id":81,"detectable_with":82,"vuln_details":89,"vuln_id":97,"name":98,"published":99,"updated":90},27497,{"tool":83,"engine":86},{"id":84,"name":85},1,"Network Scanner",{"id":87,"name":88},2,"Nuclei",{"id":81,"codename":90,"description":90,"severity":91,"risk_description":92,"public_description":93,"public_recommendation":94,"recommendation":90,"references":95,"cvssv3":90,"epss_score":90,"epss_percentile":90,"cve":90,"in_cisa_catalog":9,"date":90,"software_type":90,"vendor":90,"product":90,"ptt_exploit_capabilities":90},null,"high","The risk exist that a remote attacker could take advantage of the default credentials for taking over the default account. If an authenticated vulnerability is present on the machine, it could also be leveraged to exploit the target, compromising the underlying system.","Apache InLong server enables default admin credentials. An attacker can execute unauthorized operations.","Change the default login credentials. Use a strong password, at least 10 characters long, preferably randomly generated. Unless the login panel is intended to be exposed to the internet, we strongly recommend placing it behind a firewall.",[96],"https://github.com/apache/inlong/","NETSCAN-NUCLEI-DEFAULT-LOGINS-APACHE-INLONG-DEFAULT-LOGIN","Apache InLong - Default Login","2025-07-31T00:00:00Z"]