Dear Valued Client,
Greetings from Gojo Host.
We would like to bring to your attention recently disclosed critical security vulnerabilities affecting WordPress websites, including CVE-2026-63030 and CVE-2026-60137 (commonly referred to as wp2shell).
These vulnerabilities may allow attackers to perform SQL injection and unauthorized remote code execution (RCE), potentially compromising affected websites if they are not updated promptly. WordPress has already released security updates to address these vulnerabilities and strongly recommends that all affected websites be updated immediately.
To help protect your website, we strongly recommend that you:
- Update your WordPress core to the latest stable version.
- Update all plugins and themes to their latest versions.
- Remove any unused or outdated plugins and themes.
- Ensure you have a recent backup before performing any updates.
For more information about these vulnerabilities and the recommended actions, please refer to the official cPanel advisory:
cPanel Security Advisory: wp2shell Vulnerability (CVE-2026-63030 and CVE-2026-60137)
If you need assistance updating or securing your WordPress website, please do not hesitate to contact our support team. We will be happy to assist you.
Thank you for choosing Gojo Host.
Kind regards,
Gojo Host Support Team
