lbherrera/wp2shell-union-based

This repository is a small proof of concept security tool that demonstrates a union based SQL injection vulnerability found in WordPress core, referred to here as wp2shell. It is written in Python and consists of a single exploit script rather than a full application or library, so there is little to install beyond having Python 3 available. The tool works against a target WordPress site by sending a crafted request that lets an attacker run arbitrary SELECT statements directly against the site's database, and printing the results back to the terminal. The README shows two example uses: running a generic query such as asking the database for its version, and a more specific command that extracts every username and password hash from the WordPress users table in one go. This second example shows the real risk behind the underlying flaw, since successfully pulling password hashes from a live site would let an attacker attempt to crack admin credentials offline. The README points to public research from Searchlight Cyber and Assetnote describing this as a pre authentication remote code execution issue tied to the WordPress 7.0.2 release, meaning the underlying bug allows an unauthenticated attacker to reach the database without ever logging in first. The project states plainly that it exists only for authorized security testing and educational purposes, and that it must only be used against systems the user owns or has explicit written permission to test. There is no setup guide beyond the two example commands, no configuration file, and no license file included in the repository, so anyone using or redistributing the code should treat its legal status as unclear beyond the stated authorized use warning.