[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":61,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":68,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":74,"vulnerability-29693":81},[4,31,38,46,55],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":29,"variant":30,"campaign_id":6},"PHP2Shell detection - top pages, pricing CTA","php2shell-rce","🚨 Detect PHP2Shell with any paid plan. Get proof now","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams","See pricing options","secondary",{"title":32,"slug":33,"text":34,"link":8,"external":9,"targets":35,"cta":37,"variant":30,"campaign_id":6},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[36],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":39,"slug":40,"text":41,"link":42,"external":43,"targets":44,"cta":42,"variant":30,"campaign_id":6},"PHP2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell detection live in every paid plan, incl. unlimited rescans for patch validation",null,false,[45],"\u002Fpricing",{"title":47,"slug":48,"text":49,"link":50,"external":9,"targets":51,"cta":54,"variant":30,"campaign_id":48},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",[52,53],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":56,"slug":57,"text":58,"link":8,"external":9,"targets":59,"cta":29,"variant":30,"campaign_id":6},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan",[60],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan",["Island",62],{"key":63,"params":64,"result":66},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":65},"{}",{"head":67},{},["Island",69],{"key":70,"params":71,"result":72},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":65},{"head":73},{},["Island",75],{"key":76,"params":77,"result":79},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":78},"{\"text-color\":\"gray\"}",{"head":80},{},{"id":82,"detectable_with":83,"vuln_details":90,"vuln_id":106,"name":107,"published":108,"updated":42},29693,{"tool":84,"engine":87},{"id":85,"name":86},1,"Network Scanner",{"id":88,"name":89},2,"Nuclei",{"id":82,"codename":42,"description":42,"severity":91,"risk_description":92,"public_description":93,"public_recommendation":94,"recommendation":42,"references":95,"cvssv3":98,"epss_score":99,"epss_percentile":100,"cve":101,"in_cisa_catalog":43,"date":103,"software_type":42,"vendor":104,"product":105,"ptt_exploit_capabilities":42},"critical","Unauthenticated attackers can obtain admin password-reset URLs, enabling full administrator account takeover.","TranslatePress WordPress plugin \u003C= 3.3.1 contains a sensitive information exposure caused by the 'trp_get_translations_regular' AJAX action saving password-reset URLs in translation dictionary, letting unauthenticated attackers extract admin password-reset URLs, exploit requires automatic string saving enabled and admin profile locale set to a published secondary language.","Update to a version later than 3.3.1 or the latest available version",[96,97],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftranslatepress-multilingual\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-19632",9.8,0.08964,0.95251,[102],"CVE-2026-19632","2026-08-26T00:00:00Z","cozmoslabs","translatepress-multilingual","NETSCAN-NUCLEI-CVE-CVE-2026-19632","TranslatePress \u003C= 3.3.1 - Unauthenticated Account Takeover","2026-09-09T00:00:00Z"]